Search for packages
Package details: pkg:maven/org.apache.tomee/tomee-webapp@7.0.5
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.5
Next non-vulnerable version 8.0.8
Latest non-vulnerable version 8.0.8
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-95nw-fscc-aaaa
Aliases:
CVE-2021-40690
GHSA-j8wc-gxx9-82hx
Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario
8.0.8
Affected by 0 other vulnerabilities.
VCID-ywuj-8vdp-aaak
Aliases:
CVE-2020-13931
GHSA-mp28-rq7g-qx62
Remote code execution in Apache TomEE
7.1.4
Affected by 1 other vulnerability.
8.0.4
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ua1d-2jxu-aaag Cross-site Scripting The Apache TomEE console (tomee-webapp) has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. CVE-2018-8031
GHSA-fg44-w3fr-hgxv

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T15:16:55.776256+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 36.1.3
2025-06-20T15:16:55.290398+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 36.1.3
2025-06-20T14:55:12.116058+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 36.1.3
2025-06-20T14:55:11.960367+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 36.1.3
2025-06-20T14:07:37.563936+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 36.1.3
2025-06-20T14:07:33.269896+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 36.1.3
2025-06-03T21:58:59.391536+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 36.1.0
2025-06-03T21:58:58.981682+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 36.1.0
2025-06-03T21:38:43.694927+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 36.1.0
2025-06-03T21:38:43.441935+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 36.1.0
2025-06-03T20:59:59.054669+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 36.1.0
2025-06-03T20:59:55.172073+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 36.1.0
2025-06-02T21:44:53.924558+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 36.1.2
2025-06-02T21:44:53.409188+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 36.1.2
2025-06-02T21:21:35.764843+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 36.1.2
2025-06-02T21:21:35.599683+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 36.1.2
2025-06-02T20:39:56.192090+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 36.1.2
2025-06-02T20:39:51.633697+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 36.1.2
2025-04-03T18:51:29.989281+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 36.0.0
2025-04-03T18:51:28.614833+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 36.0.0
2025-04-03T18:06:22.569705+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 36.0.0
2025-04-03T18:06:22.142673+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 36.0.0
2025-04-03T16:59:23.211285+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 36.0.0
2025-04-03T16:59:12.440714+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 36.0.0
2025-03-28T20:03:04.020591+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag None 36.0.0
2025-02-18T00:27:21.593579+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 35.1.0
2025-02-18T00:27:20.407738+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 35.1.0
2025-02-17T23:32:40.845988+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 35.1.0
2025-02-17T23:32:40.674606+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 35.1.0
2025-02-17T23:02:45.661554+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 35.1.0
2025-02-17T23:02:45.573655+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 35.1.0
2024-11-20T23:12:38.455155+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 35.0.0
2024-11-20T22:37:33.647540+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 35.0.0
2024-11-20T22:17:50.725397+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 35.0.0
2024-11-18T23:00:11.351018+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.3.2
2024-11-18T22:28:49.988242+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.3.2
2024-11-18T22:13:17.453243+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.3.2
2024-10-15T18:21:28.122248+00:00 GithubOSV Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-fg44-w3fr-hgxv/GHSA-fg44-w3fr-hgxv.json 34.0.2
2024-10-07T23:59:07.098174+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.0.2
2024-10-07T23:29:31.265217+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.0.2
2024-10-07T23:13:54.938113+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.0.2
2024-10-07T17:45:36.827125+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/advisories/GHSA-fg44-w3fr-hgxv 34.0.2
2024-09-23T00:13:12.828197+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.0.1
2024-09-22T23:43:33.724156+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.0.1
2024-09-18T09:13:42.521872+00:00 GithubOSV Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-fg44-w3fr-hgxv/GHSA-fg44-w3fr-hgxv.json 34.0.1
2024-09-17T22:40:04.623660+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.0.1
2024-09-17T22:04:05.135513+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/advisories/GHSA-fg44-w3fr-hgxv 34.0.1
2024-04-24T02:16:46.767714+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.0.0rc4
2024-04-24T02:16:45.404944+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 34.0.0rc4
2024-04-24T01:44:34.108048+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.0.0rc4
2024-04-24T01:44:33.729888+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 34.0.0rc4
2024-04-24T01:27:25.964313+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.0.0rc4
2024-04-24T01:27:25.848516+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc4
2024-04-23T23:08:40.409573+00:00 GithubOSV Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-fg44-w3fr-hgxv/GHSA-fg44-w3fr-hgxv.json 34.0.0rc4
2024-04-23T19:14:47.966769+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/advisories/GHSA-fg44-w3fr-hgxv 34.0.0rc4
2024-04-23T19:14:47.842083+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc4
2024-01-10T04:51:20.848751+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.0.0rc2
2024-01-10T04:51:19.476472+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 34.0.0rc2
2024-01-10T04:15:38.383033+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.0.0rc2
2024-01-10T04:15:37.974946+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 34.0.0rc2
2024-01-10T03:57:38.473743+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.0.0rc2
2024-01-10T03:57:38.348842+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc2
2024-01-09T21:05:17.351226+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/advisories/GHSA-fg44-w3fr-hgxv 34.0.0rc2
2024-01-09T21:05:17.202357+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc2
2024-01-03T21:38:52.482207+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2021-40690.yml 34.0.0rc1
2024-01-03T21:38:51.052742+00:00 GitLab Importer Affected by VCID-95nw-fscc-aaaa None 34.0.0rc1
2024-01-03T20:59:43.319098+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2020-13931.yml 34.0.0rc1
2024-01-03T20:59:42.651978+00:00 GitLab Importer Affected by VCID-ywuj-8vdp-aaak None 34.0.0rc1
2024-01-03T20:39:34.643286+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc1
2024-01-03T18:02:33.079432+00:00 GitLab Importer Fixing VCID-ua1d-2jxu-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee-webapp/CVE-2018-8031.yml 34.0.0rc1
2024-01-03T17:38:49.177933+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag https://github.com/advisories/GHSA-fg44-w3fr-hgxv 34.0.0rc1
2024-01-03T16:10:51.110754+00:00 GHSA Importer Fixing VCID-ua1d-2jxu-aaag None 34.0.0rc1