Search for packages
Package details: pkg:apache/tomcat@4.1.11
purl pkg:apache/tomcat@4.1.11
Next non-vulnerable version 4.1.13
Latest non-vulnerable version 11.0.8
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ncxu-ua7h-aaab
Aliases:
CVE-2002-1148
GHSA-jxcv-v856-j5vg
The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
4.1.12
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:40.621753+00:00 Apache Tomcat Importer Affected by VCID-ncxu-ua7h-aaab https://tomcat.apache.org/security-4.html 36.0.0
2024-09-18T08:17:50.495583+00:00 Apache Tomcat Importer Affected by VCID-ncxu-ua7h-aaab https://tomcat.apache.org/security-4.html 34.0.1
2024-01-04T02:15:53.554360+00:00 Apache Tomcat Importer Affected by VCID-ncxu-ua7h-aaab https://tomcat.apache.org/security-4.html 34.0.0rc1