Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@10.0.0
purl pkg:apache/tomcat@10.0.0
Next non-vulnerable version 10.0.7
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-9484

Low: Fix for CVE-2020-9484 was incomplete
10.0.2
Vulnerable
CVE-2021-25122

Important: Request mix-up with h2c
10.0.2
Vulnerable
Vulnerabilities fixed by this package (7)
Advisory Summary Aliases
CVE-2020-11996
Important: HTTP/2 DoS
CVE-2020-13934
Moderate: HTTP/2 DoS
CVE-2020-13935
Important: WebSocket DoS
CVE-2020-13943
Moderate: HTTP/2 request mix-up
CVE-2020-17527
Moderate: HTTP/2 request header mix-up
CVE-2020-9484
Low: Fix for CVE-2020-9484 was incomplete
CVE-2021-24122
Important: Information disclosure