Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@7.0.88
purl pkg:maven/org.apache.tomcat/tomcat-util@7.0.88
Next non-vulnerable version 7.0.107
Latest non-vulnerable version 11.0.25
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2019-0232

Improper Input Validation When running on Windows with `enableCmdLineArguments` enabled, the CGI Servlet in Apache Tomcat is vulnerable to Remote …
7.0.94
Vulnerable
8.5.40
Vulnerable
9.0.19
Vulnerable
CVE-2019-0221

Cross-site Scripting The SSI `printenv` command in Apache Tomcat echoes user provided data without escaping and is, therefore, vulnerable to …
7.0.94
Vulnerable
8.5.40
Vulnerable
9.0.19
Vulnerable
CVE-2020-1935

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat, the HTTP header parsing code used an approach to …
7.0.100
Vulnerable
8.5.51
Vulnerable
9.0.31
Vulnerable
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
8.5.60
Vulnerable
9.0.40
Vulnerable
7.0.107
Not vulnerable
10.0.2
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2018-1336
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …