Search for packages
| purl | pkg:apache/tomcat@3.3.1-a |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3yb9-9j6r-aaaf
Aliases: CVE-2003-0044 GHSA-5hgm-qm5m-5vmw |
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML. |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-gtmk-xrse-aaar | Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file. |
CVE-2003-0043
GHSA-cvx5-7vc7-rg77 |
| VCID-xfxh-m2mj-aaan | Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character. |
CVE-2003-0042
GHSA-qfw2-wvrw-mvw4 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T13:19:41.463946+00:00 | Apache Tomcat Importer | Fixing | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.359366+00:00 | Apache Tomcat Importer | Fixing | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.254268+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2024-09-18T08:17:51.326192+00:00 | Apache Tomcat Importer | Fixing | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.225972+00:00 | Apache Tomcat Importer | Fixing | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.122837+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-01-04T02:15:54.350233+00:00 | Apache Tomcat Importer | Fixing | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.256780+00:00 | Apache Tomcat Importer | Fixing | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.157379+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |