Search for packages
Package details: pkg:apache/tomcat@4.1.28
purl pkg:apache/tomcat@4.1.28
Next non-vulnerable version 4.1.29
Latest non-vulnerable version 11.0.8
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-31ma-z76n-aaaa
Aliases:
CVE-2007-1858
CVE-2007-1858 tomcat anonymous cipher issue
4.1.32
Affected by 1 other vulnerability.
5.5.17
Affected by 1 other vulnerability.
VCID-5t6h-swmf-aaaj
Aliases:
CVE-2002-1567
GHSA-86fp-jgwm-wgj5
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
4.1.29
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:40.418550+00:00 Apache Tomcat Importer Affected by VCID-5t6h-swmf-aaaj https://tomcat.apache.org/security-4.html 36.0.0
2025-03-28T13:19:40.086154+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-4.html 36.0.0
2024-09-18T08:17:50.297066+00:00 Apache Tomcat Importer Affected by VCID-5t6h-swmf-aaaj https://tomcat.apache.org/security-4.html 34.0.1
2024-09-18T08:17:49.971630+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-4.html 34.0.1
2024-01-04T02:15:53.361850+00:00 Apache Tomcat Importer Affected by VCID-5t6h-swmf-aaaj https://tomcat.apache.org/security-4.html 34.0.0rc1
2024-01-04T02:15:53.039219+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-4.html 34.0.0rc1