Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@3.1.1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3yb9-9j6r-aaaf
Aliases: CVE-2003-0044 GHSA-5hgm-qm5m-5vmw |
Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML. |
Affected by 4 other vulnerabilities. |
|
VCID-5z8m-1yd1-aaaj
Aliases: CVE-2001-0590 GHSA-x445-mmpw-7r4f |
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0). |
Affected by 1 other vulnerability. |
|
VCID-6n5x-qv7t-aaam
Aliases: CVE-2001-0829 GHSA-58hj-575g-5j25 |
A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message. |
Affected by 1 other vulnerability. |
|
VCID-bba2-tuwb-aaas
Aliases: CVE-2005-0808 |
Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007. | There are no reported fixed by versions. |
|
VCID-gtmk-xrse-aaar
Aliases: CVE-2003-0043 GHSA-cvx5-7vc7-rg77 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, uses trusted privileges when processing the web.xml file, which could allow remote attackers to read portions of some files through the web.xml file. |
Affected by 1 other vulnerability. |
|
VCID-pyj4-zvrt-aaah
Aliases: CVE-2000-0760 |
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. |
Affected by 5 other vulnerabilities. |
|
VCID-tq5q-bvbw-aaaf
Aliases: CVE-2002-2006 GHSA-8g4f-fh7f-4fwh |
The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets. |
Affected by 5 other vulnerabilities. Affected by 31 other vulnerabilities. |
|
VCID-xfxh-m2mj-aaan
Aliases: CVE-2003-0042 GHSA-qfw2-wvrw-mvw4 |
Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character. |
Affected by 1 other vulnerability. |
|
VCID-za59-ur2z-aaaj
Aliases: CVE-2003-0045 GHSA-w97x-xfxf-f9xj |
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T13:19:42.004435+00:00 | Apache Tomcat Importer | Affected by | VCID-5z8m-1yd1-aaaj | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.925605+00:00 | Apache Tomcat Importer | Affected by | VCID-6n5x-qv7t-aaam | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.779215+00:00 | Apache Tomcat Importer | Affected by | VCID-pyj4-zvrt-aaah | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.709485+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.584555+00:00 | Apache Tomcat Importer | Affected by | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.485771+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.381181+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.280943+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2025-03-28T13:19:41.066288+00:00 | Apache Tomcat Importer | Affected by | VCID-bba2-tuwb-aaas | https://tomcat.apache.org/security-3.html | 36.0.0 |
| 2024-09-18T08:17:51.849303+00:00 | Apache Tomcat Importer | Affected by | VCID-5z8m-1yd1-aaaj | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.770897+00:00 | Apache Tomcat Importer | Affected by | VCID-6n5x-qv7t-aaam | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.626529+00:00 | Apache Tomcat Importer | Affected by | VCID-pyj4-zvrt-aaah | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.560820+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.439626+00:00 | Apache Tomcat Importer | Affected by | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.346890+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.246828+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:51.148239+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-09-18T08:17:50.935461+00:00 | Apache Tomcat Importer | Affected by | VCID-bba2-tuwb-aaas | https://tomcat.apache.org/security-3.html | 34.0.1 |
| 2024-01-04T02:15:54.872107+00:00 | Apache Tomcat Importer | Affected by | VCID-5z8m-1yd1-aaaj | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.794937+00:00 | Apache Tomcat Importer | Affected by | VCID-6n5x-qv7t-aaam | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.645276+00:00 | Apache Tomcat Importer | Affected by | VCID-pyj4-zvrt-aaah | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.577638+00:00 | Apache Tomcat Importer | Affected by | VCID-tq5q-bvbw-aaaf | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.458653+00:00 | Apache Tomcat Importer | Affected by | VCID-za59-ur2z-aaaj | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.370669+00:00 | Apache Tomcat Importer | Affected by | VCID-xfxh-m2mj-aaan | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.277387+00:00 | Apache Tomcat Importer | Affected by | VCID-gtmk-xrse-aaar | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:54.182350+00:00 | Apache Tomcat Importer | Affected by | VCID-3yb9-9j6r-aaaf | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |
| 2024-01-04T02:15:53.970661+00:00 | Apache Tomcat Importer | Affected by | VCID-bba2-tuwb-aaas | https://tomcat.apache.org/security-3.html | 34.0.0rc1 |