Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@5.0.30
purl pkg:maven/org.apache.tomcat/tomcat@5.0.30
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (14)
Vulnerability Summary Fixed by
VCID-17mt-cmdb-aaar
Aliases:
CVE-2006-7195
GHSA-p57v-p3fx-qgwm
CVE-2006-7195 tomcat XSS in example webapps
5.5.18
Affected by 0 other vulnerabilities.
5.5.18,
Affected by 0 other vulnerabilities.
VCID-1bxb-dc7f-aaad
Aliases:
CVE-2007-1355
GHSA-4c6x-gfc8-c26r
CVE-2007-1355 tomcat XSS in samples
5.5.24,
Affected by 0 other vulnerabilities.
6.0.11
Affected by 0 other vulnerabilities.
VCID-31ma-z76n-aaaa
Aliases:
CVE-2007-1858
CVE-2007-1858 tomcat anonymous cipher issue
5.5.17,
Affected by 0 other vulnerabilities.
VCID-3cn3-wbw7-aaaf
Aliases:
CVE-2005-4838
Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.
5.5.7,
Affected by 0 other vulnerabilities.
VCID-5p51-8u8j-aaaj
Aliases:
CVE-2007-2450
GHSA-5c5p-jxvx-x7j2
CVE-2007-2450 tomcat host manager XSS
5.5.25
Affected by 4 other vulnerabilities.
5.5.25,
Affected by 0 other vulnerabilities.
6.0.14
Affected by 2 other vulnerabilities.
VCID-8ev5-nn75-aaap
Aliases:
CVE-2007-0450
GHSA-4prh-gqw8-rgh5
CVE-2007-0450 tomcat directory traversal
5.5.22
Affected by 1 other vulnerability.
5.5.22,
Affected by 0 other vulnerabilities.
6.0.10
Affected by 2 other vulnerabilities.
VCID-8mnn-61dd-aaaj
Aliases:
CVE-2007-1358
GHSA-xmc9-6p56-3c4v
CVE-2007-1358 tomcat accept-language xss flaw
5.5.21,
Affected by 0 other vulnerabilities.
6.0.6
Affected by 0 other vulnerabilities.
VCID-8tsz-hrqv-aaar
Aliases:
CVE-2007-3385
GHSA-6j8f-66vh-39mj
CVE-2007-3385 tomcat handling of cookie values
5.5.25,
Affected by 0 other vulnerabilities.
6.0.14
Affected by 2 other vulnerabilities.
VCID-chsg-486g-aaac
Aliases:
CVE-2005-2090
GHSA-f2gq-p6qv-ccw4
Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."
5.5.23,
Affected by 0 other vulnerabilities.
6.0.11
Affected by 0 other vulnerabilities.
VCID-gte7-xda1-aaas
Aliases:
CVE-2005-3510
GHSA-8f4w-jwqv-5cxc
Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.
5.5.12
Affected by 2 other vulnerabilities.
5.5.13,
Affected by 0 other vulnerabilities.
VCID-npzp-axqb-aaaa
Aliases:
CVE-2007-2449
GHSA-hc39-rjwp-qffq
CVE-2007-2449 tomcat examples jsp XSS
5.5.25,
Affected by 0 other vulnerabilities.
6.0.14
Affected by 2 other vulnerabilities.
VCID-qdyv-j5zf-aaaq
Aliases:
CVE-2007-3382
GHSA-qff8-g48j-pwpw
CVE-2007-3382 tomcat handling of cookies
5.5.25,
Affected by 0 other vulnerabilities.
6.0.14
Affected by 2 other vulnerabilities.
VCID-ugfm-9gaz-aaab
Aliases:
CVE-2006-3835
GHSA-wfj7-mhr5-pcwq
CVE-2006-3835 tomcat directory listing issue
5.5.13,
Affected by 0 other vulnerabilities.
5.5.17
Affected by 1 other vulnerability.
VCID-zpve-n9ex-aaak
Aliases:
CVE-2006-7196
GHSA-pm78-wxxf-fw98
CVE-2006-7196 tomcat XSS in example webapps
5.0.31
Affected by 0 other vulnerabilities.
5.5.16
Affected by 1 other vulnerability.
5.5.16,
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-04-09T21:35:04.086099+00:00 GHSA Importer Affected by VCID-8tsz-hrqv-aaar https://github.com/advisories/GHSA-6j8f-66vh-39mj 36.0.0
2025-03-28T13:19:38.660991+00:00 Apache Tomcat Importer Affected by VCID-3cn3-wbw7-aaaf https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.591509+00:00 Apache Tomcat Importer Affected by VCID-gte7-xda1-aaas https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.523522+00:00 Apache Tomcat Importer Affected by VCID-ugfm-9gaz-aaab https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.452295+00:00 Apache Tomcat Importer Affected by VCID-zpve-n9ex-aaak https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.379050+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.308118+00:00 Apache Tomcat Importer Affected by VCID-17mt-cmdb-aaar https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.115313+00:00 Apache Tomcat Importer Affected by VCID-8mnn-61dd-aaaj https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:38.045996+00:00 Apache Tomcat Importer Affected by VCID-8ev5-nn75-aaap https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.972544+00:00 Apache Tomcat Importer Affected by VCID-chsg-486g-aaac https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.901443+00:00 Apache Tomcat Importer Affected by VCID-1bxb-dc7f-aaad https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.779552+00:00 Apache Tomcat Importer Affected by VCID-8tsz-hrqv-aaar https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.711343+00:00 Apache Tomcat Importer Affected by VCID-qdyv-j5zf-aaaq https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.643113+00:00 Apache Tomcat Importer Affected by VCID-5p51-8u8j-aaaj https://tomcat.apache.org/security-5.html 36.0.0
2025-03-28T13:19:37.574394+00:00 Apache Tomcat Importer Affected by VCID-npzp-axqb-aaaa https://tomcat.apache.org/security-5.html 36.0.0
2024-09-18T08:17:48.560422+00:00 Apache Tomcat Importer Affected by VCID-3cn3-wbw7-aaaf https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.485100+00:00 Apache Tomcat Importer Affected by VCID-gte7-xda1-aaas https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.413339+00:00 Apache Tomcat Importer Affected by VCID-ugfm-9gaz-aaab https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.341611+00:00 Apache Tomcat Importer Affected by VCID-zpve-n9ex-aaak https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.272729+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.201443+00:00 Apache Tomcat Importer Affected by VCID-17mt-cmdb-aaar https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:48.013996+00:00 Apache Tomcat Importer Affected by VCID-8mnn-61dd-aaaj https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.942746+00:00 Apache Tomcat Importer Affected by VCID-8ev5-nn75-aaap https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.877622+00:00 Apache Tomcat Importer Affected by VCID-chsg-486g-aaac https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.813701+00:00 Apache Tomcat Importer Affected by VCID-1bxb-dc7f-aaad https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.703210+00:00 Apache Tomcat Importer Affected by VCID-8tsz-hrqv-aaar https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.637045+00:00 Apache Tomcat Importer Affected by VCID-qdyv-j5zf-aaaq https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.571814+00:00 Apache Tomcat Importer Affected by VCID-5p51-8u8j-aaaj https://tomcat.apache.org/security-5.html 34.0.1
2024-09-18T08:17:47.503910+00:00 Apache Tomcat Importer Affected by VCID-npzp-axqb-aaaa https://tomcat.apache.org/security-5.html 34.0.1
2024-09-17T22:36:53.974864+00:00 GitLab Importer Affected by VCID-npzp-axqb-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-2449.yml 34.0.1
2024-09-17T22:36:52.035128+00:00 GitLab Importer Affected by VCID-17mt-cmdb-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2006-7195.yml 34.0.1
2024-09-17T22:36:31.564257+00:00 GitLab Importer Affected by VCID-qdyv-j5zf-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-3382.yml 34.0.1
2024-09-17T22:36:29.696264+00:00 GitLab Importer Affected by VCID-8tsz-hrqv-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-3385.yml 34.0.1
2024-09-17T22:02:51.325491+00:00 GHSA Importer Affected by VCID-8tsz-hrqv-aaar https://github.com/advisories/GHSA-6j8f-66vh-39mj 34.0.1
2024-09-17T22:02:51.025175+00:00 GHSA Importer Affected by VCID-qdyv-j5zf-aaaq https://github.com/advisories/GHSA-qff8-g48j-pwpw 34.0.1
2024-09-17T22:02:50.789675+00:00 GHSA Importer Affected by VCID-npzp-axqb-aaaa https://github.com/advisories/GHSA-hc39-rjwp-qffq 34.0.1
2024-09-17T22:01:08.299356+00:00 GHSA Importer Affected by VCID-17mt-cmdb-aaar https://github.com/advisories/GHSA-p57v-p3fx-qgwm 34.0.1
2024-09-17T22:00:56.211954+00:00 GHSA Importer Affected by VCID-5p51-8u8j-aaaj https://github.com/advisories/GHSA-5c5p-jxvx-x7j2 34.0.1
2024-04-23T17:39:59.394119+00:00 GHSA Importer Affected by VCID-5p51-8u8j-aaaj https://github.com/advisories/GHSA-5c5p-jxvx-x7j2 34.0.0rc4
2024-02-14T15:18:38.828228+00:00 GitLab Importer Affected by VCID-17mt-cmdb-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2006-7195.yml 34.0.0rc2
2024-02-12T20:16:44.965681+00:00 GHSA Importer Affected by VCID-17mt-cmdb-aaar https://github.com/advisories/GHSA-p57v-p3fx-qgwm 34.0.0rc2
2024-01-04T02:15:51.656569+00:00 Apache Tomcat Importer Affected by VCID-3cn3-wbw7-aaaf https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.582717+00:00 Apache Tomcat Importer Affected by VCID-gte7-xda1-aaas https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.512391+00:00 Apache Tomcat Importer Affected by VCID-ugfm-9gaz-aaab https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.442764+00:00 Apache Tomcat Importer Affected by VCID-zpve-n9ex-aaak https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.373659+00:00 Apache Tomcat Importer Affected by VCID-31ma-z76n-aaaa https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.305801+00:00 Apache Tomcat Importer Affected by VCID-17mt-cmdb-aaar https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.122636+00:00 Apache Tomcat Importer Affected by VCID-8mnn-61dd-aaaj https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:51.053999+00:00 Apache Tomcat Importer Affected by VCID-8ev5-nn75-aaap https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.988916+00:00 Apache Tomcat Importer Affected by VCID-chsg-486g-aaac https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.922869+00:00 Apache Tomcat Importer Affected by VCID-1bxb-dc7f-aaad https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.811915+00:00 Apache Tomcat Importer Affected by VCID-8tsz-hrqv-aaar https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.746695+00:00 Apache Tomcat Importer Affected by VCID-qdyv-j5zf-aaaq https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.678013+00:00 Apache Tomcat Importer Affected by VCID-5p51-8u8j-aaaj https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-04T02:15:50.605623+00:00 Apache Tomcat Importer Affected by VCID-npzp-axqb-aaaa https://tomcat.apache.org/security-5.html 34.0.0rc1
2024-01-03T17:59:57.664613+00:00 GitLab Importer Affected by VCID-npzp-axqb-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-2449.yml 34.0.0rc1
2024-01-03T17:59:36.415663+00:00 GitLab Importer Affected by VCID-qdyv-j5zf-aaaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-3382.yml 34.0.0rc1
2024-01-03T17:59:34.850734+00:00 GitLab Importer Affected by VCID-8tsz-hrqv-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2007-3385.yml 34.0.0rc1
2024-01-03T17:37:39.575455+00:00 GHSA Importer Affected by VCID-8tsz-hrqv-aaar https://github.com/advisories/GHSA-6j8f-66vh-39mj 34.0.0rc1
2024-01-03T17:37:39.246871+00:00 GHSA Importer Affected by VCID-qdyv-j5zf-aaaq https://github.com/advisories/GHSA-qff8-g48j-pwpw 34.0.0rc1
2024-01-03T17:37:39.002976+00:00 GHSA Importer Affected by VCID-npzp-axqb-aaaa https://github.com/advisories/GHSA-hc39-rjwp-qffq 34.0.0rc1