Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.49
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.49
Next non-vulnerable version 9.0.104
Latest non-vulnerable version 11.0.8
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-nm9b-h95h-aaaa
Aliases:
CVE-2020-9484
GHSA-344f-f5vg-2jfj
Potential remote code execution in Apache Tomcat
8.5.55
Affected by 8 other vulnerabilities.
9.0.35
Affected by 7 other vulnerabilities.
10.0.0-M5
Affected by 1 other vulnerability.
10.0.2
Affected by 1 other vulnerability.
VCID-nswt-2j13-aaak
Aliases:
CVE-2016-5388
GHSA-v646-rx6w-r3qq
Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.
8.5.5
Affected by 13 other vulnerabilities.
VCID-s7md-7wyb-d3dp
Aliases:
CVE-2024-52316
GHSA-xcpr-7mr4-h4xq
Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication (formerly JASPIC) ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the authentication may not fail, allowing the user to bypass the authentication process. There are no known Jakarta Authentication components that behave in this way. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M26, from 10.1.0-M1 through 10.1.30, from 9.0.0-M1 through 9.0.95. Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fix the issue.
9.0.96
Affected by 1 other vulnerability.
10.1.30
Affected by 1 other vulnerability.
11.0.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:12:22.940249+00:00 GitLab Importer Affected by VCID-s7md-7wyb-d3dp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2024-52316.yml 36.1.3
2025-06-20T15:40:02.453059+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 36.1.3
2025-06-20T15:39:49.547925+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 36.1.3
2025-06-03T23:48:06.287051+00:00 GitLab Importer Affected by VCID-s7md-7wyb-d3dp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2024-52316.yml 36.1.0
2025-06-03T22:20:18.407931+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 36.1.0
2025-06-03T22:20:04.969535+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 36.1.0
2025-06-02T23:46:44.804589+00:00 GitLab Importer Affected by VCID-s7md-7wyb-d3dp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2024-52316.yml 36.1.2
2025-06-02T22:09:06.339182+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 36.1.2
2025-06-02T22:08:52.668756+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 36.1.2
2025-04-03T22:33:29.302018+00:00 GitLab Importer Affected by VCID-s7md-7wyb-d3dp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2024-52316.yml 36.0.0
2025-04-03T19:36:55.381403+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 36.0.0
2025-04-03T19:36:31.356809+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 36.0.0
2025-02-18T07:31:45.016672+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 35.1.0
2025-02-18T07:31:44.345494+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 35.1.0
2025-02-18T04:15:05.119962+00:00 GitLab Importer Affected by VCID-s7md-7wyb-d3dp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2024-52316.yml 35.1.0
2024-11-21T03:00:13.618051+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 35.0.0
2024-11-19T02:50:11.052963+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.3.2
2024-10-08T03:25:39.962888+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.0.2
2024-10-07T18:50:52.030994+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa https://github.com/advisories/GHSA-344f-f5vg-2jfj 34.0.2
2024-10-07T17:10:32.781080+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak https://github.com/advisories/GHSA-v646-rx6w-r3qq 34.0.2
2024-09-23T03:21:04.897493+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.0.1
2024-09-22T19:44:09.415009+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa https://github.com/advisories/GHSA-344f-f5vg-2jfj 34.0.1
2024-09-22T17:34:23.044715+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak https://github.com/advisories/GHSA-v646-rx6w-r3qq 34.0.1
2024-04-24T05:58:55.301997+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.0.0rc4
2024-04-24T05:58:54.605062+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc4
2024-04-23T20:44:55.232495+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa None 34.0.0rc4
2024-04-23T20:44:49.619694+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa https://github.com/advisories/GHSA-344f-f5vg-2jfj 34.0.0rc4
2024-04-23T18:25:40.906514+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak https://github.com/advisories/GHSA-v646-rx6w-r3qq 34.0.0rc4
2024-04-23T18:25:38.839736+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc4
2024-01-10T08:30:01.314519+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.0.0rc2
2024-01-10T08:30:00.613908+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc2
2024-01-09T22:39:00.277082+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa https://github.com/advisories/GHSA-344f-f5vg-2jfj 34.0.0rc2
2024-01-09T22:38:58.436241+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa None 34.0.0rc2
2024-01-09T20:20:04.895112+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak https://github.com/advisories/GHSA-v646-rx6w-r3qq 34.0.0rc2
2024-01-09T20:20:02.904962+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc2
2024-01-04T01:15:08.779717+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2016-5388.yml 34.0.0rc1
2024-01-04T01:15:08.092962+00:00 GitLab Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc1
2024-01-03T18:26:44.191887+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa https://github.com/advisories/GHSA-344f-f5vg-2jfj 34.0.0rc1
2024-01-03T17:11:18.981222+00:00 GHSA Importer Affected by VCID-nm9b-h95h-aaaa None 34.0.0rc1
2024-01-03T15:41:06.036741+00:00 GHSA Importer Affected by VCID-nswt-2j13-aaak None 34.0.0rc1