VulnerableCode Package Details - pkg:apache/tomcat@5.5.25

Search for packages

Package details: pkg:apache/tomcat@5.5.25

Essentials
History (27)

purl	pkg:apache/tomcat@5.5.25

Next non-vulnerable version	5.5.30
Latest non-vulnerable version	11.0.8
Risk	10.0

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-8ha5-3wkt-aaaa Aliases: CVE-2007-5333 GHSA-cww4-vj5r-rx57	CVE-2007-5333 Improve cookie parsing for tomcat5	5.5.26 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.0.16 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-es7j-vwa1-aaar Aliases: CVE-2007-5461 GHSA-v5p2-vg3c-pmrr	CVE-2007-5461 Absolute path traversal Apache Tomcat WEBDAV	5.5.26 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.0.16 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-u6sk-57c8-aaah Aliases: CVE-2007-6286 GHSA-qrj4-rmqg-4hcp	CVE-2007-6286 Tomcat5 Data integrity	5.5.26 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.0.16 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xtxt-x8g1-aaan Aliases: CVE-2007-5342 GHSA-w65j-cmqc-37p2	CVE-2007-5342 Apache Tomcat's default security policy is too open	5.5.26 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 6.0.16 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (5)

Vulnerability	Summary	Aliases
VCID-5p51-8u8j-aaaj	CVE-2007-2450 tomcat host manager XSS	CVE-2007-2450 GHSA-5c5p-jxvx-x7j2
VCID-8tsz-hrqv-aaar	CVE-2007-3385 tomcat handling of cookie values	CVE-2007-3385 GHSA-6j8f-66vh-39mj
VCID-9mbq-dvdg-aaah	CVE-2007-3386 tomcat host manager xss	CVE-2007-3386
VCID-npzp-axqb-aaaa	CVE-2007-2449 tomcat examples jsp XSS	CVE-2007-2449 GHSA-hc39-rjwp-qffq
VCID-qdyv-j5zf-aaaq	CVE-2007-3382 tomcat handling of cookies	CVE-2007-3382 GHSA-qff8-g48j-pwpw

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T13:19:37.824342+00:00	Apache Tomcat Importer	Fixing	VCID-9mbq-dvdg-aaah	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.762995+00:00	Apache Tomcat Importer	Fixing	VCID-8tsz-hrqv-aaar	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.694850+00:00	Apache Tomcat Importer	Fixing	VCID-qdyv-j5zf-aaaq	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.626532+00:00	Apache Tomcat Importer	Fixing	VCID-5p51-8u8j-aaaj	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.556572+00:00	Apache Tomcat Importer	Fixing	VCID-npzp-axqb-aaaa	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.494211+00:00	Apache Tomcat Importer	Affected by	VCID-u6sk-57c8-aaah	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.445336+00:00	Apache Tomcat Importer	Affected by	VCID-es7j-vwa1-aaar	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.393504+00:00	Apache Tomcat Importer	Affected by	VCID-xtxt-x8g1-aaan	https://tomcat.apache.org/security-5.html	36.0.0
2025-03-28T13:19:37.341422+00:00	Apache Tomcat Importer	Affected by	VCID-8ha5-3wkt-aaaa	https://tomcat.apache.org/security-5.html	36.0.0
2024-09-18T08:17:47.743355+00:00	Apache Tomcat Importer	Fixing	VCID-9mbq-dvdg-aaah	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.687762+00:00	Apache Tomcat Importer	Fixing	VCID-8tsz-hrqv-aaar	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.621501+00:00	Apache Tomcat Importer	Fixing	VCID-qdyv-j5zf-aaaq	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.556339+00:00	Apache Tomcat Importer	Fixing	VCID-5p51-8u8j-aaaj	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.487019+00:00	Apache Tomcat Importer	Fixing	VCID-npzp-axqb-aaaa	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.423135+00:00	Apache Tomcat Importer	Affected by	VCID-u6sk-57c8-aaah	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.374553+00:00	Apache Tomcat Importer	Affected by	VCID-es7j-vwa1-aaar	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.326333+00:00	Apache Tomcat Importer	Affected by	VCID-xtxt-x8g1-aaan	https://tomcat.apache.org/security-5.html	34.0.1
2024-09-18T08:17:47.275298+00:00	Apache Tomcat Importer	Affected by	VCID-8ha5-3wkt-aaaa	https://tomcat.apache.org/security-5.html	34.0.1
2024-01-04T02:15:50.852089+00:00	Apache Tomcat Importer	Fixing	VCID-9mbq-dvdg-aaah	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.796389+00:00	Apache Tomcat Importer	Fixing	VCID-8tsz-hrqv-aaar	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.731158+00:00	Apache Tomcat Importer	Fixing	VCID-qdyv-j5zf-aaaq	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.661461+00:00	Apache Tomcat Importer	Fixing	VCID-5p51-8u8j-aaaj	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.589994+00:00	Apache Tomcat Importer	Fixing	VCID-npzp-axqb-aaaa	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.528551+00:00	Apache Tomcat Importer	Affected by	VCID-u6sk-57c8-aaah	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.481712+00:00	Apache Tomcat Importer	Affected by	VCID-es7j-vwa1-aaar	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.431738+00:00	Apache Tomcat Importer	Affected by	VCID-xtxt-x8g1-aaan	https://tomcat.apache.org/security-5.html	34.0.0rc1
2024-01-04T02:15:50.382738+00:00	Apache Tomcat Importer	Affected by	VCID-8ha5-3wkt-aaaa	https://tomcat.apache.org/security-5.html	34.0.0rc1