Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@11.0.0
purl pkg:apache/tomcat@11.0.0
Next non-vulnerable version 11.0.3
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2024-52318

Important: XSS in generated JSPs
11.0.1
Vulnerable
Vulnerabilities fixed by this package (15)
Advisory Summary Aliases
CVE-2023-24998
Important: Apache Tomcat denial of service
CVE-2023-28708
Important: Apache Tomcat information disclosure
CVE-2023-28709
Moderate: Apache Tomcat denial of service
CVE-2023-34981
Important: Information disclosure
CVE-2023-41080
Moderate: Open redirect
CVE-2023-42795
Important: Information Disclosure
CVE-2023-44487
Important: Denial of Service
CVE-2023-45648
Important: Request smuggling
CVE-2023-46589
Important: Request smuggling
CVE-2024-23672
Important: Denial of Service
CVE-2024-24549
Important: Denial of Service
CVE-2024-34750
Important: Denial of Service
CVE-2024-38286
Important: Denial of Service
CVE-2024-52316
Low: Authentication Bypass
CVE-2024-52317
Important: Request and/or response mix-up