Search for packages
| purl | pkg:apache/tomcat@4.0.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-29jw-3gsy-aaad
Aliases: CVE-2002-0682 |
Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet. |
Affected by 0 other vulnerabilities. |
|
VCID-3cn3-wbw7-aaaf
Aliases: CVE-2005-4838 |
Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-3wz7-8vt8-aaam
Aliases: CVE-2002-1394 GHSA-8v5p-2cpv-c2x6 |
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148. |
Affected by 0 other vulnerabilities. |
|
VCID-8ev5-nn75-aaap
Aliases: CVE-2007-0450 GHSA-4prh-gqw8-rgh5 |
CVE-2007-0450 tomcat directory traversal |
Affected by 9 other vulnerabilities. Affected by 1 other vulnerability. Affected by 2 other vulnerabilities. |
|
VCID-8mnn-61dd-aaaj
Aliases: CVE-2007-1358 GHSA-xmc9-6p56-3c4v |
CVE-2007-1358 tomcat accept-language xss flaw |
Affected by 9 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-9nv6-j6xm-aaaj
Aliases: CVE-2002-2009 GHSA-r6cf-cr44-m8rr |
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message. |
Affected by 1 other vulnerability. |
|
VCID-av1e-fm3v-aaag
Aliases: CVE-2002-0935 GHSA-xmf4-j3j7-xj7q |
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang. |
Affected by 0 other vulnerabilities. |
|
VCID-chsg-486g-aaac
Aliases: CVE-2005-2090 GHSA-f2gq-p6qv-ccw4 |
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." |
Affected by 9 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-dmry-pqfx-aaan
Aliases: CVE-2003-0866 GHSA-7wj2-48c4-2684 |
The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service via several requests that do not follow the HTTP protocol, which causes Tomcat to reject later requests. |
Affected by 30 other vulnerabilities. |
|
VCID-e2fg-fd5a-aaan
Aliases: CVE-2007-3383 GHSA-wjwr-3jch-479j |
Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, related to generation of error messages. |
Affected by 3 other vulnerabilities. |
|
VCID-es7j-vwa1-aaar
Aliases: CVE-2007-5461 GHSA-v5p2-vg3c-pmrr |
CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV |
Affected by 3 other vulnerabilities. Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-gte7-xda1-aaas
Aliases: CVE-2005-3510 GHSA-8f4w-jwqv-5cxc |
Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-ncxu-ua7h-aaab
Aliases: CVE-2002-1148 GHSA-jxcv-v856-j5vg |
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet. |
Affected by 2 other vulnerabilities. |
|
VCID-npzp-axqb-aaaa
Aliases: CVE-2007-2449 GHSA-hc39-rjwp-qffq |
CVE-2007-2449 tomcat examples jsp XSS |
Affected by 3 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-p28h-7k6p-aaae
Aliases: CVE-2001-0917 GHSA-2w2w-cv3h-rr38 |
Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension. |
Affected by 1 other vulnerability. |
|
VCID-tq5q-bvbw-aaaf
Aliases: CVE-2002-2006 GHSA-8g4f-fh7f-4fwh |
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets. |
Affected by 30 other vulnerabilities. |
|
VCID-ugfm-9gaz-aaab
Aliases: CVE-2006-3835 GHSA-wfj7-mhr5-pcwq |
CVE-2006-3835 tomcat directory listing issue |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-zpve-n9ex-aaak
Aliases: CVE-2006-7196 GHSA-pm78-wxxf-fw98 |
CVE-2006-7196 tomcat XSS in example webapps |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-c1tb-euru-aaap | Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions. |
CVE-2002-0493
GHSA-p543-jg43-9pm5 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T13:19:40.983664+00:00 | Apache Tomcat Importer | Fixing | VCID-c1tb-euru-aaap | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.933793+00:00 | Apache Tomcat Importer | Affected by | VCID-p28h-7k6p-aaae | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.883588+00:00 | Apache Tomcat Importer | Affected by | VCID-9nv6-j6xm-aaaj | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.836131+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.782385+00:00 | Apache Tomcat Importer | Affected by | VCID-dmry-pqfx-aaan | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.678753+00:00 | Apache Tomcat Importer | Affected by | VCID-av1e-fm3v-aaag | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.607149+00:00 | Apache Tomcat Importer | Affected by | VCID-ncxu-ua7h-aaab | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.533814+00:00 | Apache Tomcat Importer | Affected by | VCID-29jw-3gsy-aaad | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.462626+00:00 | Apache Tomcat Importer | Affected by | VCID-3wz7-8vt8-aaam | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.345513+00:00 | Apache Tomcat Importer | Affected by | VCID-gte7-xda1-aaas | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.277560+00:00 | Apache Tomcat Importer | Affected by | VCID-3cn3-wbw7-aaaf | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.209680+00:00 | Apache Tomcat Importer | Affected by | VCID-ugfm-9gaz-aaab | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:40.136630+00:00 | Apache Tomcat Importer | Affected by | VCID-zpve-n9ex-aaak | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.918141+00:00 | Apache Tomcat Importer | Affected by | VCID-8mnn-61dd-aaaj | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.849984+00:00 | Apache Tomcat Importer | Affected by | VCID-8ev5-nn75-aaap | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.781016+00:00 | Apache Tomcat Importer | Affected by | VCID-chsg-486g-aaac | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.704656+00:00 | Apache Tomcat Importer | Affected by | VCID-es7j-vwa1-aaar | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.539052+00:00 | Apache Tomcat Importer | Affected by | VCID-e2fg-fd5a-aaan | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2025-03-28T13:19:39.354193+00:00 | Apache Tomcat Importer | Affected by | VCID-npzp-axqb-aaaa | https://tomcat.apache.org/security-4.html | 36.0.0 |
| 2024-09-18T08:17:50.852697+00:00 | Apache Tomcat Importer | Fixing | VCID-c1tb-euru-aaap | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.806293+00:00 | Apache Tomcat Importer | Affected by | VCID-p28h-7k6p-aaae | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.758236+00:00 | Apache Tomcat Importer | Affected by | VCID-9nv6-j6xm-aaaj | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.710771+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.662896+00:00 | Apache Tomcat Importer | Affected by | VCID-dmry-pqfx-aaan | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.554554+00:00 | Apache Tomcat Importer | Affected by | VCID-av1e-fm3v-aaag | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.479716+00:00 | Apache Tomcat Importer | Affected by | VCID-ncxu-ua7h-aaab | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.409599+00:00 | Apache Tomcat Importer | Affected by | VCID-29jw-3gsy-aaad | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.339878+00:00 | Apache Tomcat Importer | Affected by | VCID-3wz7-8vt8-aaam | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.222616+00:00 | Apache Tomcat Importer | Affected by | VCID-gte7-xda1-aaas | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.156089+00:00 | Apache Tomcat Importer | Affected by | VCID-3cn3-wbw7-aaaf | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.087197+00:00 | Apache Tomcat Importer | Affected by | VCID-ugfm-9gaz-aaab | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:50.021104+00:00 | Apache Tomcat Importer | Affected by | VCID-zpve-n9ex-aaak | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.777813+00:00 | Apache Tomcat Importer | Affected by | VCID-8mnn-61dd-aaaj | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.710863+00:00 | Apache Tomcat Importer | Affected by | VCID-8ev5-nn75-aaap | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.641858+00:00 | Apache Tomcat Importer | Affected by | VCID-chsg-486g-aaac | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.575191+00:00 | Apache Tomcat Importer | Affected by | VCID-es7j-vwa1-aaar | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.412717+00:00 | Apache Tomcat Importer | Affected by | VCID-e2fg-fd5a-aaan | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:49.227422+00:00 | Apache Tomcat Importer | Affected by | VCID-npzp-axqb-aaaa | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-01-04T02:15:53.894481+00:00 | Apache Tomcat Importer | Fixing | VCID-c1tb-euru-aaap | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.850010+00:00 | Apache Tomcat Importer | Affected by | VCID-p28h-7k6p-aaae | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.802800+00:00 | Apache Tomcat Importer | Affected by | VCID-9nv6-j6xm-aaaj | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.756175+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.707036+00:00 | Apache Tomcat Importer | Affected by | VCID-dmry-pqfx-aaan | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.609881+00:00 | Apache Tomcat Importer | Affected by | VCID-av1e-fm3v-aaag | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.540389+00:00 | Apache Tomcat Importer | Affected by | VCID-ncxu-ua7h-aaab | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.471381+00:00 | Apache Tomcat Importer | Affected by | VCID-29jw-3gsy-aaad | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.403230+00:00 | Apache Tomcat Importer | Affected by | VCID-3wz7-8vt8-aaam | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.292364+00:00 | Apache Tomcat Importer | Affected by | VCID-gte7-xda1-aaas | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.222514+00:00 | Apache Tomcat Importer | Affected by | VCID-3cn3-wbw7-aaaf | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.155633+00:00 | Apache Tomcat Importer | Affected by | VCID-ugfm-9gaz-aaab | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.087069+00:00 | Apache Tomcat Importer | Affected by | VCID-zpve-n9ex-aaak | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.879250+00:00 | Apache Tomcat Importer | Affected by | VCID-8mnn-61dd-aaaj | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.807999+00:00 | Apache Tomcat Importer | Affected by | VCID-8ev5-nn75-aaap | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.738368+00:00 | Apache Tomcat Importer | Affected by | VCID-chsg-486g-aaac | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.669802+00:00 | Apache Tomcat Importer | Affected by | VCID-es7j-vwa1-aaar | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.506944+00:00 | Apache Tomcat Importer | Affected by | VCID-e2fg-fd5a-aaan | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:52.322049+00:00 | Apache Tomcat Importer | Affected by | VCID-npzp-axqb-aaaa | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |