Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@7.0.109 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9suj-hpmx-aaag
Aliases: CVE-2021-30639 GHSA-44qp-qhfv-c7f6 |
Improper Handling of Exceptional Conditions in Apache Tomcat |
Affected by 22 other vulnerabilities. Affected by 25 other vulnerabilities. Affected by 12 other vulnerabilities. |
|
VCID-ah95-hj74-aaaq
Aliases: CVE-2017-12617 GHSA-xjgh-84hx-56c5 |
Unrestricted Upload of File with Dangerous Type When running Apache Tomcat with HTTP PUTs enabled it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. |
Affected by 13 other vulnerabilities. Affected by 46 other vulnerabilities. Affected by 50 other vulnerabilities. |
|
VCID-dwgf-f1eg-aaaf
Aliases: CVE-2022-23181 GHSA-9f3j-pm6f-9fm5 |
Race condition in Apache Tomcat |
Affected by 18 other vulnerabilities. Affected by 21 other vulnerabilities. Affected by 9 other vulnerabilities. Affected by 22 other vulnerabilities. Affected by 18 other vulnerabilities. |
|
VCID-ma76-864y-aaaf
Aliases: CVE-2005-4836 GHSA-qrcx-p4rr-g48h |
The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information. | There are no reported fixed by versions. |
|
VCID-rjmz-fcp1-aaac
Aliases: CVE-2020-8022 GHSA-gc58-v8h3-x2gr |
Incorrect Default Permissions in Apache Tomcat |
Affected by 8 other vulnerabilities. Affected by 35 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6zmg-trun-aaac | Authentication Bypass by Alternate Name in Apache Tomcat |
CVE-2021-30640
GHSA-36qh-35cm-5w2w |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T15:28:54.923207+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 36.1.3 |
| 2025-06-20T15:28:15.292443+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 36.1.3 |
| 2025-06-20T15:11:11.609659+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 36.1.3 |
| 2025-06-20T15:11:10.783468+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 36.1.3 |
| 2025-06-03T22:09:56.304969+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 36.1.0 |
| 2025-06-03T22:09:25.449854+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 36.1.0 |
| 2025-06-03T21:53:50.320810+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 36.1.0 |
| 2025-06-03T21:53:49.525086+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 36.1.0 |
| 2025-06-02T21:57:20.551137+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 36.1.2 |
| 2025-06-02T21:56:42.684283+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 36.1.2 |
| 2025-06-02T21:38:59.536952+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 36.1.2 |
| 2025-06-02T21:38:58.680467+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 36.1.2 |
| 2025-04-03T19:14:57.264953+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 36.0.0 |
| 2025-04-03T19:13:38.808599+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 36.0.0 |
| 2025-04-03T18:39:59.260264+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 36.0.0 |
| 2025-04-03T18:39:57.288498+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 36.0.0 |
| 2025-03-28T13:19:27.733489+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 36.0.0 |
| 2025-02-18T06:23:56.868053+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 35.1.0 |
| 2025-02-18T06:23:54.260416+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 35.1.0 |
| 2025-02-18T00:11:57.895516+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 35.1.0 |
| 2025-02-18T00:11:56.945537+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 35.1.0 |
| 2024-11-21T02:30:12.927695+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 35.0.0 |
| 2024-11-20T23:03:00.241606+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 35.0.0 |
| 2024-11-19T02:13:32.410839+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.3.2 |
| 2024-11-18T22:49:26.886032+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.3.2 |
| 2024-10-11T09:26:15.376628+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 34.0.2 |
| 2024-10-11T09:25:14.152196+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | https://tomcat.apache.org/security-4.html | 34.0.2 |
| 2024-10-08T02:47:42.748988+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.0.2 |
| 2024-10-07T23:49:56.664696+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.0.2 |
| 2024-10-07T20:07:42.613129+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | https://github.com/advisories/GHSA-9f3j-pm6f-9fm5 | 34.0.2 |
| 2024-10-07T19:23:02.806146+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | https://github.com/advisories/GHSA-44qp-qhfv-c7f6 | 34.0.2 |
| 2024-10-07T18:48:10.178622+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | https://github.com/advisories/GHSA-gc58-v8h3-x2gr | 34.0.2 |
| 2024-10-07T17:15:05.856567+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | https://github.com/advisories/GHSA-xjgh-84hx-56c5 | 34.0.2 |
| 2024-09-23T02:45:23.107531+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.0.1 |
| 2024-09-22T20:51:39.114976+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | https://github.com/advisories/GHSA-9f3j-pm6f-9fm5 | 34.0.1 |
| 2024-09-22T20:10:57.894871+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | https://github.com/advisories/GHSA-44qp-qhfv-c7f6 | 34.0.1 |
| 2024-09-22T19:42:13.659627+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | https://github.com/advisories/GHSA-gc58-v8h3-x2gr | 34.0.1 |
| 2024-09-22T17:38:32.233292+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | https://github.com/advisories/GHSA-xjgh-84hx-56c5 | 34.0.1 |
| 2024-09-20T08:48:22.480167+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | https://tomcat.apache.org/security-4.html | 34.0.1 |
| 2024-09-18T08:17:37.945309+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 34.0.1 |
| 2024-09-17T22:36:46.651918+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.0.1 |
| 2024-04-26T06:12:44.300656+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 34.0.0rc4 |
| 2024-04-26T06:12:42.664232+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc4 |
| 2024-04-26T06:10:19.197074+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | None | 34.0.0rc4 |
| 2024-04-26T06:10:16.856502+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | https://tomcat.apache.org/security-4.html | 34.0.0rc4 |
| 2024-04-24T05:18:29.029722+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.0.0rc4 |
| 2024-04-24T05:18:26.388842+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc4 |
| 2024-04-24T02:10:03.928292+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.0.0rc4 |
| 2024-04-24T02:10:01.939448+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc4 |
| 2024-04-23T22:24:58.333476+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | https://github.com/advisories/GHSA-9f3j-pm6f-9fm5 | 34.0.0rc4 |
| 2024-04-23T22:24:56.750209+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | None | 34.0.0rc4 |
| 2024-04-23T21:25:42.204280+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | https://github.com/advisories/GHSA-44qp-qhfv-c7f6 | 34.0.0rc4 |
| 2024-04-23T21:25:39.787939+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | None | 34.0.0rc4 |
| 2024-04-23T20:40:04.919541+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | https://github.com/advisories/GHSA-gc58-v8h3-x2gr | 34.0.0rc4 |
| 2024-04-23T20:40:03.487348+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc4 |
| 2024-04-23T18:39:09.862680+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | None | 34.0.0rc4 |
| 2024-04-23T18:39:05.416477+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | https://github.com/advisories/GHSA-xjgh-84hx-56c5 | 34.0.0rc4 |
| 2024-01-12T14:23:24.505416+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 34.0.0rc2 |
| 2024-01-12T14:23:22.892258+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc2 |
| 2024-01-12T14:21:06.429397+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | None | 34.0.0rc2 |
| 2024-01-12T14:21:04.628036+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | https://tomcat.apache.org/security-4.html | 34.0.0rc2 |
| 2024-01-10T07:50:01.757415+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.0.0rc2 |
| 2024-01-10T07:49:59.229494+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc2 |
| 2024-01-10T04:44:27.103529+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.0.0rc2 |
| 2024-01-10T04:44:25.203088+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc2 |
| 2024-01-10T00:22:13.186343+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | https://github.com/advisories/GHSA-9f3j-pm6f-9fm5 | 34.0.0rc2 |
| 2024-01-10T00:22:11.660573+00:00 | GHSA Importer | Affected by | VCID-dwgf-f1eg-aaaf | None | 34.0.0rc2 |
| 2024-01-09T23:22:07.937427+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | https://github.com/advisories/GHSA-44qp-qhfv-c7f6 | 34.0.0rc2 |
| 2024-01-09T23:22:05.587133+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | None | 34.0.0rc2 |
| 2024-01-09T22:33:04.007762+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | https://github.com/advisories/GHSA-gc58-v8h3-x2gr | 34.0.0rc2 |
| 2024-01-09T22:33:02.509036+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc2 |
| 2024-01-09T20:29:54.869626+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | None | 34.0.0rc2 |
| 2024-01-09T20:29:52.350353+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | https://github.com/advisories/GHSA-xjgh-84hx-56c5 | 34.0.0rc2 |
| 2024-01-05T10:03:36.487380+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc1 |
| 2024-01-05T10:01:24.094881+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | None | 34.0.0rc1 |
| 2024-01-05T10:01:22.284196+00:00 | Apache Tomcat Importer | Affected by | VCID-ma76-864y-aaaf | https://tomcat.apache.org/security-4.html | 34.0.0rc1 |
| 2024-01-04T02:15:41.267297+00:00 | Apache Tomcat Importer | Fixing | VCID-6zmg-trun-aaac | https://tomcat.apache.org/security-7.html | 34.0.0rc1 |
| 2024-01-04T00:35:14.099681+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2020-8022.yml | 34.0.0rc1 |
| 2024-01-04T00:35:11.491514+00:00 | GitLab Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc1 |
| 2024-01-03T21:31:24.384841+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | None | 34.0.0rc1 |
| 2024-01-03T19:07:42.757024+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | https://github.com/advisories/GHSA-44qp-qhfv-c7f6 | 34.0.0rc1 |
| 2024-01-03T19:07:40.425251+00:00 | GHSA Importer | Affected by | VCID-9suj-hpmx-aaag | None | 34.0.0rc1 |
| 2024-01-03T18:21:42.851363+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | https://github.com/advisories/GHSA-gc58-v8h3-x2gr | 34.0.0rc1 |
| 2024-01-03T17:59:50.766927+00:00 | GitLab Importer | Fixing | VCID-6zmg-trun-aaac | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2021-30640.yml | 34.0.0rc1 |
| 2024-01-03T17:08:11.015860+00:00 | GHSA Importer | Affected by | VCID-rjmz-fcp1-aaac | None | 34.0.0rc1 |
| 2024-01-03T15:47:31.821084+00:00 | GHSA Importer | Affected by | VCID-ah95-hj74-aaaq | None | 34.0.0rc1 |