Search for packages
Package details: pkg:apache/tomcat@5.5.9
purl pkg:apache/tomcat@5.5.9
Next non-vulnerable version 5.5.13
Latest non-vulnerable version 11.0.8
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-nwsx-6pj2-aaap
Aliases:
CVE-2008-1947
GHSA-f98p-9pp6-7q6c
CVE-2008-1947 Tomcat host manager xss - name field
5.5.27
Affected by 5 other vulnerabilities.
6.0.18
Affected by 5 other vulnerabilities.
VCID-xtxt-x8g1-aaan
Aliases:
CVE-2007-5342
GHSA-w65j-cmqc-37p2
CVE-2007-5342 Apache Tomcat's default security policy is too open
5.5.26
Affected by 3 other vulnerabilities.
6.0.16
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:37.388527+00:00 Apache Tomcat Importer Affected by VCID-xtxt-x8g1-aaan https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.235779+00:00 Apache Tomcat Importer Affected by VCID-nwsx-6pj2-aaap https://tomcat.apache.org/security-5.html 36.0.0
2024-09-18T08:17:47.321544+00:00 Apache Tomcat Importer Affected by VCID-xtxt-x8g1-aaan https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.166229+00:00 Apache Tomcat Importer Affected by VCID-nwsx-6pj2-aaap https://tomcat.apache.org/security-5.html 34.0.1
2024-01-04T02:15:50.427569+00:00 Apache Tomcat Importer Affected by VCID-xtxt-x8g1-aaan https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.276347+00:00 Apache Tomcat Importer Affected by VCID-nwsx-6pj2-aaap https://tomcat.apache.org/security-5.html 34.0.0rc1