Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.0
purl pkg:apache/tomcat@9.0.0
Next non-vulnerable version 9.0.5
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2017-12617

Important: Remote Code Execution
9.0.1
Vulnerable
Vulnerabilities fixed by this package (24)
Advisory Summary Aliases
CVE-2015-5345
Low: Directory disclosure
CVE-2015-5346
Low: Session Fixation
CVE-2015-5351
Moderate: CSRF token leak
CVE-2016-0706
Low: Security Manager bypass
CVE-2016-0714
Moderate: Security Manager bypass
CVE-2016-0762
Low: Timing Attack
CVE-2016-0763
Moderate: Security Manager bypass
CVE-2016-3092
Moderate: Denial of Service
CVE-2016-5018
Low: Security Manager Bypass
CVE-2016-6794
Low: System Property Disclosure
CVE-2016-6796
Low: Security Manager Bypass
CVE-2016-6797
Low: Unrestricted Access to Global Resources
CVE-2016-6816
Important: Information Disclosure
CVE-2016-6817
Important: Denial of Service
CVE-2016-8735
Important: Remote Code Execution
CVE-2016-8745
Important: Information Disclosure
CVE-2016-8747
Moderate: Information Disclosure
CVE-2017-5647
Important: Information Disclosure
CVE-2017-5648
Low: Information Disclosure
CVE-2017-5650
Important: Denial of Service
CVE-2017-5651
Important: Information Disclosure
CVE-2017-5664
Important: Security Constraint Bypass
CVE-2017-7674
Moderate: Cache Poisoning
CVE-2017-7675
Important: Security Constraint Bypass