Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@5.5.0
purl pkg:apache/tomcat@5.5.0
Next non-vulnerable version 5.5.1
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (25)
Advisory Summary Fixed in package version
CVE-2007-3386

Low: Cross-site scripting
5.5.25
Vulnerable
CVE-2007-5333

Low: Session hi-jacking
5.5.26
Vulnerable
CVE-2007-5461

Important: Information disclosure
5.5.26
Vulnerable
CVE-2008-1232

Low: Cross-site scripting
5.5.27
Vulnerable
CVE-2008-2370

Important: Information disclosure
5.5.27
Vulnerable
CVE-2008-3271

Low: Information disclosure
5.5.1
Not vulnerable
CVE-2008-5515

Important: Information Disclosure
5.5.28
Vulnerable
CVE-2009-0033

Important: Denial of Service
5.5.28
Vulnerable
CVE-2009-0580

Low: Information disclosure
5.5.28
Vulnerable
CVE-2009-0781

Low: Cross-site scripting
5.5.28
Vulnerable
CVE-2009-0783

Low: Information disclosure
5.5.28
Vulnerable
CVE-2009-2693

Low: Arbitrary file deletion and/or alteration on deploy
5.5.29
Vulnerable
CVE-2009-2901

Low: Insecure partial deploy after failed undeploy
5.5.29
Vulnerable
CVE-2009-2902

Low: Unexpected file deletion in work directory
5.5.29
Vulnerable
CVE-2009-3548

Low: Insecure default password
5.5.29
Vulnerable
CVE-2010-1157

Low: Information disclosure in authentication headers
5.5.30
Not vulnerable
CVE-2010-2227

Important: Remote Denial Of Service and Information Disclosure Vulnerability
5.5.30
Not vulnerable
CVE-2010-3718

Low: SecurityManager file permission bypass
5.5.30
Not vulnerable
CVE-2011-0013

Low: Cross-site scripting
5.5.32
Vulnerable
CVE-2011-1184

Moderate: Multiple weaknesses in HTTP DIGEST authentication
5.5.34
Vulnerable
CVE-2011-2204

Low: Information disclosure
5.5.34
Vulnerable
CVE-2011-2526

Low: Information disclosure
5.5.34
Vulnerable
CVE-2011-3190

Important: Authentication bypass and information disclosure
5.5.34
Vulnerable
CVE-2012-0022

Important: Denial of service
5.5.35
Vulnerable
CVE-2012-3439

Moderate: DIGEST authentication weakness
5.5.36
Not vulnerable
This package is not known to fix any advisories.