Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@6.0.0
purl pkg:apache/tomcat@6.0.0
Next non-vulnerable version 6.0.6
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (64)
Advisory Summary Fixed in package version
CVE-2005-2090

Important: Information disclosure
6.0.11
Not vulnerable
CVE-2007-0450

Important: Directory traversal
6.0.10
Vulnerable
CVE-2007-1355

Moderate: Cross-site scripting
6.0.11
Not vulnerable
CVE-2007-1358

Low: Cross-site scripting
6.0.6
Not vulnerable
CVE-2007-2449

Low: Cross-site scripting
6.0.14
Vulnerable
CVE-2007-2450

Low: Cross-site scripting
6.0.14
Vulnerable
CVE-2007-3382

Low: Session hi-jacking
6.0.14
Vulnerable
CVE-2007-3385

Low: Session hi-jacking
6.0.14
Vulnerable
CVE-2007-3386

Low: Cross-site scripting
6.0.14
Vulnerable
CVE-2007-5333

Low: Session hi-jacking
6.0.16
Vulnerable
CVE-2007-5342

Low: Elevated privileges
6.0.16
Vulnerable
CVE-2007-5461

Important: Information disclosure
6.0.16
Vulnerable
CVE-2007-6286

Important: Data integrity
6.0.16
Vulnerable
CVE-2008-0128

Moderate: Session hi-jacking
6.0.9
Vulnerable
CVE-2008-1232

Low: Cross-site scripting
6.0.18
Vulnerable
CVE-2008-1947

Low: Cross-site scripting
6.0.18
Vulnerable
CVE-2008-2370

Important: Information disclosure
6.0.18
Vulnerable
CVE-2008-5515

Important: Information Disclosure
6.0.20
Vulnerable
CVE-2009-0033

Important: Denial of Service
6.0.20
Vulnerable
CVE-2009-0580

Low: Information disclosure
6.0.20
Vulnerable
CVE-2009-0781

Low: Cross-site scripting
6.0.20
Vulnerable
CVE-2009-0783

Low: Information disclosure
6.0.20
Vulnerable
CVE-2009-2693

Low: Arbitrary file deletion and/or alteration on deploy
6.0.24
Not vulnerable
CVE-2009-2901

Low: Insecure partial deploy after failed undeploy
6.0.24
Not vulnerable
CVE-2009-2902

Low: Unexpected file deletion in work directory
6.0.24
Not vulnerable
CVE-2009-3548

Low: Insecure default password
6.0.24
Not vulnerable
CVE-2010-1157

Low: Information disclosure in authentication headers
6.0.28
Not vulnerable
CVE-2010-2227

Important: Remote Denial Of Service and Information Disclosure Vulnerability
6.0.28
Not vulnerable
CVE-2010-3718

Low: SecurityManager file permission bypass
6.0.30
Vulnerable
CVE-2011-0013

Low: Cross-site scripting
6.0.30
Vulnerable
CVE-2011-0534

Important: Remote Denial Of Service
6.0.32
Vulnerable
CVE-2011-1184

Moderate: Multiple weaknesses in HTTP DIGEST authentication
6.0.33
Vulnerable
CVE-2011-2204

Low: Information disclosure
6.0.33
Vulnerable
CVE-2011-2526

Low: Information disclosure
6.0.33
Vulnerable
CVE-2011-3190

Important: Authentication bypass and information disclosure
6.0.35
Vulnerable
CVE-2012-0022

Important: Denial of service
6.0.35
Vulnerable
CVE-2012-2733

Important: Denial of service
6.0.36
Vulnerable
CVE-2012-3439

Moderate: DIGEST authentication weakness
6.0.36
Vulnerable
CVE-2012-3544

Important: Denial of service
6.0.37
Vulnerable
CVE-2012-3546

Important: Bypass of security constraints
6.0.36
Vulnerable
CVE-2012-4534

Important: Denial of service
6.0.36
Vulnerable
CVE-2013-1571

Low: Frame injection in documentation Javadoc
6.0.39
Vulnerable
CVE-2013-4286

Important: Information disclosure
6.0.39
Vulnerable
CVE-2013-4322

Important: Denial of service
6.0.39
Vulnerable
CVE-2013-4590

Low: Information disclosure
6.0.39
Vulnerable
CVE-2014-0075

Important: Denial of Service
6.0.41
Vulnerable
CVE-2014-0096

Important: Information disclosure
6.0.41
Vulnerable
CVE-2014-0099

Important: Information disclosure
6.0.41
Vulnerable
CVE-2014-0119

Low: Information Disclosure
6.0.41
Vulnerable
CVE-2014-0227

Important: Request Smuggling
6.0.43
Vulnerable
CVE-2014-0230

Low: Denial of Service
6.0.44
Vulnerable
CVE-2014-7810

Moderate: Security Manager bypass
6.0.44
Vulnerable
CVE-2015-5174

Low: Limited directory traversal
6.0.45
Vulnerable
CVE-2015-5345

Low: Directory disclosure
6.0.45
Vulnerable
CVE-2016-0706

Low: Security Manager bypass
6.0.45
Vulnerable
CVE-2016-0714

Moderate: Security Manager bypass
6.0.45
Vulnerable
CVE-2016-0762

Low: Timing Attack
6.0.47
Vulnerable
CVE-2016-5018

Low: Security Manager Bypass
6.0.47
Vulnerable
CVE-2016-6794

Low: System Property Disclosure
6.0.47
Vulnerable
CVE-2016-6796

Low: Security Manager Bypass
6.0.47
Vulnerable
CVE-2016-6797

Low: Unrestricted Access to Global Resources
6.0.47
Vulnerable
CVE-2016-6816

Important: Information Disclosure
6.0.48
Vulnerable
CVE-2016-8735

Important: Remote Code Execution
6.0.48
Vulnerable
CVE-2017-5647

Important: Information Disclosure
6.0.53
Not vulnerable
This package is not known to fix any advisories.