Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@3.3a
purl pkg:maven/org.apache.tomcat/tomcat@3.3a
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-3yb9-9j6r-aaaf
Aliases:
CVE-2003-0044
GHSA-5hgm-qm5m-5vmw
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.
3.3.2
Affected by 4 other vulnerabilities.
VCID-bba2-tuwb-aaas
Aliases:
CVE-2005-0808
Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007. There are no reported fixed by versions.
VCID-gtmk-xrse-aaar
Aliases:
CVE-2003-0043
GHSA-cvx5-7vc7-rg77
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file.
3.3.1a
Affected by 1 other vulnerability.
VCID-xfxh-m2mj-aaan
Aliases:
CVE-2003-0042
GHSA-qfw2-wvrw-mvw4
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
3.3.1a
Affected by 1 other vulnerability.
VCID-za59-ur2z-aaaj
Aliases:
CVE-2003-0045
GHSA-w97x-xfxf-f9xj
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
3.3.1
Affected by 2 other vulnerabilities.
3.3.1a
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:41.793760+00:00 Apache Tomcat Importer Fixing VCID-pyj4-zvrt-aaah https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.724067+00:00 Apache Tomcat Importer Fixing VCID-tq5q-bvbw-aaaf https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.656731+00:00 Apache Tomcat Importer Fixing VCID-8xq4-qp4b-aaah https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.599114+00:00 Apache Tomcat Importer Affected by VCID-za59-ur2z-aaaj https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.500400+00:00 Apache Tomcat Importer Affected by VCID-xfxh-m2mj-aaan https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.395793+00:00 Apache Tomcat Importer Affected by VCID-gtmk-xrse-aaar https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.295567+00:00 Apache Tomcat Importer Affected by VCID-3yb9-9j6r-aaaf https://tomcat.apache.org/security-3.html 36.0.0
2025-03-28T13:19:41.080748+00:00 Apache Tomcat Importer Affected by VCID-bba2-tuwb-aaas https://tomcat.apache.org/security-3.html 36.0.0
2024-10-15T18:00:11.993745+00:00 GithubOSV Importer Fixing VCID-tq5q-bvbw-aaaf https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-8g4f-fh7f-4fwh/GHSA-8g4f-fh7f-4fwh.json 34.0.2
2024-09-18T09:06:19.517351+00:00 GithubOSV Importer Fixing VCID-tq5q-bvbw-aaaf https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-8g4f-fh7f-4fwh/GHSA-8g4f-fh7f-4fwh.json 34.0.1
2024-09-18T08:17:51.640657+00:00 Apache Tomcat Importer Fixing VCID-pyj4-zvrt-aaah https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.574953+00:00 Apache Tomcat Importer Fixing VCID-tq5q-bvbw-aaaf https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.507354+00:00 Apache Tomcat Importer Fixing VCID-8xq4-qp4b-aaah https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.453800+00:00 Apache Tomcat Importer Affected by VCID-za59-ur2z-aaaj https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.361027+00:00 Apache Tomcat Importer Affected by VCID-xfxh-m2mj-aaan https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.261021+00:00 Apache Tomcat Importer Affected by VCID-gtmk-xrse-aaar https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:51.162439+00:00 Apache Tomcat Importer Affected by VCID-3yb9-9j6r-aaaf https://tomcat.apache.org/security-3.html 34.0.1
2024-09-18T08:17:50.949790+00:00 Apache Tomcat Importer Affected by VCID-bba2-tuwb-aaas https://tomcat.apache.org/security-3.html 34.0.1
2024-09-17T22:36:39.265771+00:00 GitLab Importer Fixing VCID-tq5q-bvbw-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2002-2006.yml 34.0.1
2024-09-17T22:01:07.681605+00:00 GHSA Importer Fixing VCID-tq5q-bvbw-aaaf https://github.com/advisories/GHSA-8g4f-fh7f-4fwh 34.0.1
2024-04-23T23:02:32.817055+00:00 GithubOSV Importer Fixing VCID-tq5q-bvbw-aaaf https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-8g4f-fh7f-4fwh/GHSA-8g4f-fh7f-4fwh.json 34.0.0rc4
2024-02-14T15:18:38.500529+00:00 GitLab Importer Fixing VCID-tq5q-bvbw-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2002-2006.yml 34.0.0rc2
2024-02-12T23:58:28.092459+00:00 GHSA Importer Fixing VCID-tq5q-bvbw-aaaf https://github.com/advisories/GHSA-8g4f-fh7f-4fwh 34.0.0rc2
2024-01-04T02:15:54.659251+00:00 Apache Tomcat Importer Fixing VCID-pyj4-zvrt-aaah https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.591569+00:00 Apache Tomcat Importer Fixing VCID-tq5q-bvbw-aaaf https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.523452+00:00 Apache Tomcat Importer Fixing VCID-8xq4-qp4b-aaah https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.472772+00:00 Apache Tomcat Importer Affected by VCID-za59-ur2z-aaaj https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.384573+00:00 Apache Tomcat Importer Affected by VCID-xfxh-m2mj-aaan https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.291370+00:00 Apache Tomcat Importer Affected by VCID-gtmk-xrse-aaar https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:54.196433+00:00 Apache Tomcat Importer Affected by VCID-3yb9-9j6r-aaaf https://tomcat.apache.org/security-3.html 34.0.0rc1
2024-01-04T02:15:53.984632+00:00 Apache Tomcat Importer Affected by VCID-bba2-tuwb-aaas https://tomcat.apache.org/security-3.html 34.0.0rc1