Search for packages
Package details: pkg:apache/tomcat@6.0.20
purl pkg:apache/tomcat@6.0.20
Next non-vulnerable version 6.0.24
Latest non-vulnerable version 11.0.8
Risk 10.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-9hhz-11ph-aaan
Aliases:
CVE-2009-3548
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
6.0.24
Affected by 0 other vulnerabilities.
VCID-kg1r-u6pn-aaak
Aliases:
CVE-2009-2902
GHSA-8wch-9gcg-v2pr
CVE-2009-2902 tomcat: unexpected file deletion in work directory
6.0.24
Affected by 0 other vulnerabilities.
VCID-x2d7-89h7-aaac
Aliases:
CVE-2009-2693
GHSA-ggx9-4728-588r
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
6.0.24
Affected by 0 other vulnerabilities.
VCID-z4zw-kc9e-aaas
Aliases:
CVE-2009-2901
GHSA-hjfh-7c4v-7q8h
CVE-2009-2901 tomcat: insecure partial deploy after failed undeploy
6.0.24
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-14qy-gggs-aaaa CVE-2009-0783 tomcat XML parser information disclosure CVE-2009-0783
GHSA-hhjg-g8xq-hhr3
VCID-1um3-jpu8-aaaj CVE-2009-0033 tomcat6 Denial-Of-Service with AJP connection CVE-2009-0033
GHSA-5cw4-ggx9-36vg
VCID-chav-tp7d-aaam Directory Traversal in Apache Tomcat CVE-2008-5515
GHSA-9737-qmgc-hfr9
VCID-u6b5-d1yp-aaah CVE-2009-0580 tomcat6 Information disclosure in authentication classes CVE-2009-0580
GHSA-w227-xcfx-3pj8
VCID-zte6-dz3c-aaan CVE-2009-0781 tomcat: XSS in Apache Tomcat calendar application CVE-2009-0781
GHSA-j788-fx57-99wp

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T13:19:35.113185+00:00 Apache Tomcat Importer Fixing VCID-14qy-gggs-aaaa https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:35.058987+00:00 Apache Tomcat Importer Fixing VCID-zte6-dz3c-aaan https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:35.007277+00:00 Apache Tomcat Importer Fixing VCID-u6b5-d1yp-aaah https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.955800+00:00 Apache Tomcat Importer Fixing VCID-1um3-jpu8-aaaj https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.901464+00:00 Apache Tomcat Importer Fixing VCID-chav-tp7d-aaam https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.840631+00:00 Apache Tomcat Importer Affected by VCID-9hhz-11ph-aaan https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.786215+00:00 Apache Tomcat Importer Affected by VCID-kg1r-u6pn-aaak https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.731500+00:00 Apache Tomcat Importer Affected by VCID-z4zw-kc9e-aaas https://tomcat.apache.org/security-6.html 36.0.0
2025-03-28T13:19:34.674986+00:00 Apache Tomcat Importer Affected by VCID-x2d7-89h7-aaac https://tomcat.apache.org/security-6.html 36.0.0
2024-09-18T08:17:45.097160+00:00 Apache Tomcat Importer Fixing VCID-14qy-gggs-aaaa https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:45.046092+00:00 Apache Tomcat Importer Fixing VCID-zte6-dz3c-aaan https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.996662+00:00 Apache Tomcat Importer Fixing VCID-u6b5-d1yp-aaah https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.946449+00:00 Apache Tomcat Importer Fixing VCID-1um3-jpu8-aaaj https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.894698+00:00 Apache Tomcat Importer Fixing VCID-chav-tp7d-aaam https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.838202+00:00 Apache Tomcat Importer Affected by VCID-9hhz-11ph-aaan https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.789072+00:00 Apache Tomcat Importer Affected by VCID-kg1r-u6pn-aaak https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.736137+00:00 Apache Tomcat Importer Affected by VCID-z4zw-kc9e-aaas https://tomcat.apache.org/security-6.html 34.0.1
2024-09-18T08:17:44.679023+00:00 Apache Tomcat Importer Affected by VCID-x2d7-89h7-aaac https://tomcat.apache.org/security-6.html 34.0.1
2024-01-04T02:15:48.206911+00:00 Apache Tomcat Importer Fixing VCID-14qy-gggs-aaaa https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:48.153209+00:00 Apache Tomcat Importer Fixing VCID-zte6-dz3c-aaan https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:48.101975+00:00 Apache Tomcat Importer Fixing VCID-u6b5-d1yp-aaah https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:48.049852+00:00 Apache Tomcat Importer Fixing VCID-1um3-jpu8-aaaj https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:47.997532+00:00 Apache Tomcat Importer Fixing VCID-chav-tp7d-aaam https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:47.937683+00:00 Apache Tomcat Importer Affected by VCID-9hhz-11ph-aaan https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:47.883070+00:00 Apache Tomcat Importer Affected by VCID-kg1r-u6pn-aaak https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:47.827253+00:00 Apache Tomcat Importer Affected by VCID-z4zw-kc9e-aaas https://tomcat.apache.org/security-6.html 34.0.0rc1
2024-01-04T02:15:47.771663+00:00 Apache Tomcat Importer Affected by VCID-x2d7-89h7-aaac https://tomcat.apache.org/security-6.html 34.0.0rc1