Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.21
purl pkg:maven/org.apache.tomcat/tomcat@7.0.21
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-21dz-gxvm-aaam
Aliases:
CVE-2011-3375
GHSA-rp8h-vr48-4j8p
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
7.0.22
Affected by 1 other vulnerability.
VCID-48zq-qere-aaas
Aliases:
CVE-2011-3376
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.
7.0.22
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:31.452938+00:00 Apache Tomcat Importer Fixing VCID-49pd-2mxh-aaaq https://tomcat.apache.org/security-7.html 36.0.0
2025-03-28T13:19:31.397067+00:00 Apache Tomcat Importer Affected by VCID-48zq-qere-aaas https://tomcat.apache.org/security-7.html 36.0.0
2025-03-28T13:19:31.348865+00:00 Apache Tomcat Importer Affected by VCID-21dz-gxvm-aaam https://tomcat.apache.org/security-7.html 36.0.0
2024-10-15T18:07:51.534329+00:00 GithubOSV Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c38m-v4m2-524v/GHSA-c38m-v4m2-524v.json 34.0.2
2024-09-18T09:12:16.838282+00:00 GithubOSV Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c38m-v4m2-524v/GHSA-c38m-v4m2-524v.json 34.0.1
2024-09-18T08:17:41.554955+00:00 Apache Tomcat Importer Fixing VCID-49pd-2mxh-aaaq https://tomcat.apache.org/security-7.html 34.0.1
2024-09-18T08:17:41.493288+00:00 Apache Tomcat Importer Affected by VCID-48zq-qere-aaas https://tomcat.apache.org/security-7.html 34.0.1
2024-09-18T08:17:41.437571+00:00 Apache Tomcat Importer Affected by VCID-21dz-gxvm-aaam https://tomcat.apache.org/security-7.html 34.0.1
2024-09-17T22:36:36.938709+00:00 GitLab Importer Fixing VCID-49pd-2mxh-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3190.yml 34.0.1
2024-09-17T22:01:21.264376+00:00 GHSA Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/advisories/GHSA-c38m-v4m2-524v 34.0.1
2024-04-23T23:07:35.646105+00:00 GithubOSV Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c38m-v4m2-524v/GHSA-c38m-v4m2-524v.json 34.0.0rc4
2024-04-23T17:40:10.554699+00:00 GHSA Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/advisories/GHSA-c38m-v4m2-524v 34.0.0rc4
2024-01-19T15:47:05.166985+00:00 GitLab Importer Fixing VCID-49pd-2mxh-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3190.yml 34.0.0rc2
2024-01-18T00:30:30.904725+00:00 GHSA Importer Fixing VCID-49pd-2mxh-aaaq https://github.com/advisories/GHSA-c38m-v4m2-524v 34.0.0rc2
2024-01-04T02:15:44.744526+00:00 Apache Tomcat Importer Fixing VCID-49pd-2mxh-aaaq https://tomcat.apache.org/security-7.html 34.0.0rc1
2024-01-04T02:15:44.690261+00:00 Apache Tomcat Importer Affected by VCID-48zq-qere-aaas https://tomcat.apache.org/security-7.html 34.0.0rc1
2024-01-04T02:15:44.638052+00:00 Apache Tomcat Importer Affected by VCID-21dz-gxvm-aaam https://tomcat.apache.org/security-7.html 34.0.0rc1