Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.27
purl pkg:maven/org.apache.tomcat/tomcat@7.0.27
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-h97e-vw19-aaap
Aliases:
CVE-2012-2733
java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which allows remote attackers to cause a denial of service (memory consumption) via a large amount of header data.
7.0.28
Affected by 1 other vulnerability.
VCID-nj2d-yt1t-aaaj
Aliases:
CVE-2020-13935
GHSA-m7jv-hq7h-mq7c
Infinite Loop in Apache Tomcat
7.0.104
Affected by 10 other vulnerabilities.
7.0.105
Affected by 9 other vulnerabilities.
8.5.56
Affected by 32 other vulnerabilities.
8.5.57
Affected by 30 other vulnerabilities.
9.0.36
Affected by 34 other vulnerabilities.
9.0.37
Affected by 32 other vulnerabilities.
10.0.0-M6
Affected by 20 other vulnerabilities.
10.0.0-M7
Affected by 18 other vulnerabilities.
VCID-se2g-2qje-aaab
Aliases:
CVE-2012-4534
org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response.
7.0.28
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T20:04:14.508860+00:00 GHSA Importer Affected by VCID-nj2d-yt1t-aaaj None 36.0.0
2025-03-28T13:19:31.205593+00:00 Apache Tomcat Importer Affected by VCID-se2g-2qje-aaab https://tomcat.apache.org/security-7.html 36.0.0
2025-03-28T13:19:31.159190+00:00 Apache Tomcat Importer Affected by VCID-h97e-vw19-aaap https://tomcat.apache.org/security-7.html 36.0.0
2025-03-28T13:19:27.940326+00:00 Apache Tomcat Importer Affected by VCID-nj2d-yt1t-aaaj https://tomcat.apache.org/security-7.html 36.0.0
2024-09-18T08:17:41.284991+00:00 Apache Tomcat Importer Affected by VCID-se2g-2qje-aaab https://tomcat.apache.org/security-7.html 34.0.1
2024-09-18T08:17:41.230136+00:00 Apache Tomcat Importer Affected by VCID-h97e-vw19-aaap https://tomcat.apache.org/security-7.html 34.0.1
2024-09-18T08:17:38.126325+00:00 Apache Tomcat Importer Affected by VCID-nj2d-yt1t-aaaj https://tomcat.apache.org/security-7.html 34.0.1
2024-09-17T22:00:38.572216+00:00 GHSA Importer Affected by VCID-nj2d-yt1t-aaaj https://github.com/advisories/GHSA-m7jv-hq7h-mq7c 34.0.1
2024-04-23T17:39:41.639797+00:00 GHSA Importer Affected by VCID-nj2d-yt1t-aaaj https://github.com/advisories/GHSA-m7jv-hq7h-mq7c 34.0.0rc4
2024-01-04T02:15:44.484657+00:00 Apache Tomcat Importer Affected by VCID-se2g-2qje-aaab https://tomcat.apache.org/security-7.html 34.0.0rc1
2024-01-04T02:15:44.435046+00:00 Apache Tomcat Importer Affected by VCID-h97e-vw19-aaap https://tomcat.apache.org/security-7.html 34.0.0rc1
2024-01-04T02:15:41.462186+00:00 Apache Tomcat Importer Affected by VCID-nj2d-yt1t-aaaj https://tomcat.apache.org/security-7.html 34.0.0rc1
2024-01-03T17:39:40.024716+00:00 GHSA Importer Affected by VCID-nj2d-yt1t-aaaj https://github.com/advisories/GHSA-m7jv-hq7h-mq7c 34.0.0rc1