Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-21dz-gxvm-aaam
Aliases:
CVE-2011-3375
GHSA-rp8h-vr48-4j8p
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
7.0.22
Affected by 1 other vulnerability.
VCID-551r-qx8g-aaae
Aliases:
CVE-2011-1419
GHSA-vch7-92vf-jm44
CVE-2011-1088 CVE-2011-1183 CVE-2011-1419 CVE-2011-1582 tomcat: various flaws due not following ServletSecurity annotations
7.0.11
Affected by 3 other vulnerabilities.
VCID-tyd3-vqd2-aaap
Aliases:
CVE-2013-4444
GHSA-h6c8-x5r3-pm88
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
7.0.40
Affected by 54 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:36:54.738597+00:00 GitLab Importer Affected by VCID-tyd3-vqd2-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2013-4444.yml 34.0.1
2024-09-17T22:36:49.802226+00:00 GitLab Importer Affected by VCID-551r-qx8g-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-1419.yml 34.0.1
2024-09-17T22:36:45.568597+00:00 GitLab Importer Affected by VCID-21dz-gxvm-aaam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3375.yml 34.0.1
2024-09-17T22:03:09.423894+00:00 GHSA Importer Affected by VCID-tyd3-vqd2-aaap https://github.com/advisories/GHSA-h6c8-x5r3-pm88 34.0.1
2024-09-17T22:01:20.784348+00:00 GHSA Importer Affected by VCID-21dz-gxvm-aaam https://github.com/advisories/GHSA-rp8h-vr48-4j8p 34.0.1
2024-09-17T22:01:20.746588+00:00 GHSA Importer Affected by VCID-551r-qx8g-aaae https://github.com/advisories/GHSA-vch7-92vf-jm44 34.0.1
2024-01-22T15:44:08.859350+00:00 GitLab Importer Affected by VCID-551r-qx8g-aaae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-1419.yml 34.0.0rc2
2024-01-22T15:44:08.772107+00:00 GitLab Importer Affected by VCID-21dz-gxvm-aaam https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3375.yml 34.0.0rc2
2024-01-19T20:15:33.168719+00:00 GHSA Importer Affected by VCID-21dz-gxvm-aaam https://github.com/advisories/GHSA-rp8h-vr48-4j8p 34.0.0rc2
2024-01-19T20:15:33.130924+00:00 GHSA Importer Affected by VCID-551r-qx8g-aaae https://github.com/advisories/GHSA-vch7-92vf-jm44 34.0.0rc2
2024-01-03T17:59:58.517598+00:00 GitLab Importer Affected by VCID-tyd3-vqd2-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2013-4444.yml 34.0.0rc1
2024-01-03T17:37:57.317111+00:00 GHSA Importer Affected by VCID-tyd3-vqd2-aaap https://github.com/advisories/GHSA-h6c8-x5r3-pm88 34.0.0rc1