Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@7.0.0
purl pkg:apache/tomcat@7.0.0
Next non-vulnerable version 7.0.2
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (67)
Advisory Summary Fixed in package version
CVE-2010-2227

Important: Remote Denial Of Service and Information Disclosure Vulnerability
7.0.2
Not vulnerable
CVE-2010-3718

Low: SecurityManager file permission bypass
7.0.4
Vulnerable
CVE-2010-4172

Low: Cross-site scripting
7.0.5
Vulnerable
CVE-2011-0013

Low: Cross-site scripting
7.0.6
Vulnerable
CVE-2011-0534

Important: Remote Denial Of Service
7.0.8
Not vulnerable
CVE-2011-1088

Important: Security constraint bypass
7.0.11
Vulnerable
CVE-2011-1184

Moderate: Multiple weaknesses in HTTP DIGEST authentication
7.0.12
Vulnerable
CVE-2011-1475

Important: Information disclosure
7.0.12
Vulnerable
CVE-2011-2204

Low: Information disclosure
7.0.19
Vulnerable
CVE-2011-2481

Low: Information disclosure
7.0.19
Vulnerable
CVE-2011-2526

Low: Information disclosure
7.0.19
Vulnerable
CVE-2011-2729

Important: Information disclosure
7.0.20
Vulnerable
CVE-2011-3190

Important: Authentication bypass and information disclosure
7.0.21
Vulnerable
CVE-2011-3375

Important: Information disclosure
7.0.22
Vulnerable
CVE-2011-3376

Low: Privilege Escalation
7.0.22
Vulnerable
CVE-2012-0022

Important: Denial of service
7.0.23
Vulnerable
CVE-2012-2733

Important: Denial of service
7.0.28
Vulnerable
CVE-2012-3439

Moderate: DIGEST authentication weakness
7.0.30
Not vulnerable
CVE-2012-3544

Important: Denial of service
7.0.30
Not vulnerable
CVE-2012-3546

Important: Bypass of security constraints
7.0.30
Not vulnerable
CVE-2012-4431

Important: Bypass of CSRF prevention filter
7.0.32
Vulnerable
CVE-2012-4534

Important: Denial of service
7.0.28
Vulnerable
CVE-2013-2067

Important: Session fixation
7.0.33
Not vulnerable
CVE-2013-2071

Moderate: Information disclosure
7.0.40
Not vulnerable
CVE-2013-4286

Important: Information disclosure
7.0.47
Vulnerable
CVE-2013-4322

Important: Denial of service
7.0.50
Vulnerable
CVE-2013-4444

Important: Remote Code Execution
7.0.40
Not vulnerable
CVE-2013-4590

Low: Information disclosure
7.0.50
Vulnerable
CVE-2014-0050

Important: Denial of Service
7.0.52
Vulnerable
CVE-2014-0075

Important: Denial of Service
7.0.53
Vulnerable
CVE-2014-0096

Important: Information disclosure
7.0.53
Vulnerable
CVE-2014-0099

Important: Information disclosure
7.0.53
Vulnerable
CVE-2014-0119

Low: Information Disclosure
7.0.54
Vulnerable
CVE-2014-0227

Important: Request Smuggling
7.0.55
Not vulnerable
CVE-2014-0230

Low: Denial of Service
7.0.55
Not vulnerable
CVE-2014-7810

Moderate: Security Manager bypass
7.0.59
Not vulnerable
CVE-2015-5174

Low: Limited directory traversal
7.0.65
Vulnerable
CVE-2015-5345

Low: Directory disclosure
7.0.68
Not vulnerable
CVE-2016-0706

Low: Security Manager bypass
7.0.68
Not vulnerable
CVE-2016-0714

Moderate: Security Manager bypass
7.0.68
Not vulnerable
CVE-2016-0762

Low: Timing Attack
7.0.72
Vulnerable
CVE-2016-0763

Moderate: Security Manager bypass
7.0.68
Not vulnerable
CVE-2016-3092

Moderate: Denial of Service
7.0.70
Vulnerable
CVE-2016-5018

Low: Security Manager Bypass
7.0.72
Vulnerable
CVE-2016-6794

Low: System Property Disclosure
7.0.72
Vulnerable
CVE-2016-6796

Low: Security Manager Bypass
7.0.72
Vulnerable
CVE-2016-6797

Low: Unrestricted Access to Global Resources
7.0.72
Vulnerable
CVE-2016-6816

Important: Information Disclosure
7.0.73
Vulnerable
CVE-2016-8735

Important: Remote Code Execution
7.0.73
Vulnerable
CVE-2016-8745

Important: Information Disclosure
7.0.75
Vulnerable
CVE-2017-12615

Important: Remote Code Execution
7.0.81
Vulnerable
CVE-2017-12616

Important: Information Disclosure
7.0.81
Vulnerable
CVE-2017-12617

Important: Remote Code Execution
7.0.82
Vulnerable
CVE-2017-5647

Important: Information Disclosure
7.0.77
Vulnerable
CVE-2017-5648

Low: Information Disclosure
7.0.76
Vulnerable
CVE-2017-5664

Important: Security Constraint Bypass
7.0.78
Vulnerable
CVE-2018-1304

Important: Security constraints mapped to context root are ignored
7.0.85
Not vulnerable
CVE-2018-1305

Important: Security constraint annotations applied too late
7.0.85
Not vulnerable
CVE-2019-0221

Low: XSS in SSI printenv
7.0.94
Not vulnerable
CVE-2019-0232

Important: Remote Code Execution on Windows
7.0.94
Not vulnerable
CVE-2019-12418

Moderate: Local Privilege Escalation
7.0.99
Vulnerable
CVE-2019-17563

Low: Session fixation
7.0.99
Vulnerable
CVE-2020-1935

Low: HTTP Request Smuggling
7.0.100
Not vulnerable
CVE-2020-1938

High: AJP Request Injection and potential Remote Code Execution
7.0.100
Not vulnerable
CVE-2020-9484

Low: Fix for CVE-2020-9484 was incomplete
7.0.108
Vulnerable
7.0.104
Vulnerable
CVE-2021-24122

Important: Information disclosure
7.0.107
Vulnerable
CVE-2021-30640

Low: Authentication weakness
7.0.109
Not vulnerable
This package is not known to fix any advisories.