Search for packages
Package details: pkg:apache/tomcat@9.0.0%2BM11
purl pkg:apache/tomcat@9.0.0%2BM11
Next non-vulnerable version 9.0.0+M19
Latest non-vulnerable version 11.0.10
Risk 10.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-j52h-jxrq-43g1
Aliases:
CVE-2016-6816
GHSA-jc7p-5r39-9477
9.0.0+M13
Affected by 1 other vulnerability.
VCID-kuap-mmfh-jyhr
Aliases:
CVE-2016-8735
GHSA-cw54-59pw-4g8c
9.0.0+M13
Affected by 1 other vulnerability.
VCID-u1n8-g1e6-y7e9
Aliases:
CVE-2016-8747
GHSA-fjwp-r6fm-q6qw
9.0.0+M17
Affected by 1 other vulnerability.
VCID-x6tm-2bpa-5qgx
Aliases:
CVE-2016-6817
GHSA-698c-2x4j-g9gq
9.0.0+M13
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T08:03:20.760801+00:00 Apache Tomcat Importer Affected by VCID-j52h-jxrq-43g1 https://tomcat.apache.org/security-9.html 37.0.0
2025-07-31T08:03:20.732155+00:00 Apache Tomcat Importer Affected by VCID-x6tm-2bpa-5qgx https://tomcat.apache.org/security-9.html 37.0.0
2025-07-31T08:03:20.702610+00:00 Apache Tomcat Importer Affected by VCID-kuap-mmfh-jyhr https://tomcat.apache.org/security-9.html 37.0.0
2025-07-31T08:03:20.641212+00:00 Apache Tomcat Importer Affected by VCID-u1n8-g1e6-y7e9 https://tomcat.apache.org/security-9.html 37.0.0