Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.30
purl pkg:apache/tomcat@9.0.30
Next non-vulnerable version 9.0.31
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2019-17569

Low: HTTP Request Smuggling
9.0.31
Not vulnerable
CVE-2020-1935

Low: HTTP Request Smuggling
9.0.31
Not vulnerable
CVE-2020-1938

Important: AJP Request Injection and potential Remote Code Execution
9.0.31
Not vulnerable
CVE-2022-34305

Low: Apache Tomcat XSS in examples web application
9.0.65
Not vulnerable
Vulnerabilities fixed by this package (1)
Advisory Summary Aliases
CVE-2019-17563
Low: Session fixation