Search for packages
| purl | pkg:apache/tomcat@8.0.0%2BRC1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2015-5345
|
Low: Directory disclosure |
Vulnerable |
|
CVE-2015-5346
|
Low: Session Fixation |
Not vulnerable |
|
CVE-2015-5351
|
Moderate: CSRF token leak |
Not vulnerable |
|
CVE-2016-0706
|
Low: Security Manager bypass |
Not vulnerable |
|
CVE-2016-0714
|
Moderate: Security Manager bypass |
Not vulnerable |
|
CVE-2016-0763
|
Moderate: Security Manager bypass |
Not vulnerable |
|
CVE-2016-6816
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2016-8735
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2016-8745
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-12617
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2017-5647
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-5648
|
Low: Information Disclosure |
Vulnerable |
|
CVE-2017-5664
|
Important: Security Constraint Bypass |
Vulnerable |
|
CVE-2017-7674
|
Moderate: Cache Poisoning |
Vulnerable |
|
CVE-2018-1304
|
Important: Security constraints mapped to context root are ignored |
Not vulnerable |
|
CVE-2018-1305
|
Important: Security constraint annotations applied too late |
Not vulnerable |
|
CVE-2018-1336
|
Important: A bug in the UTF-8 decoder can lead to DoS |
Vulnerable |
|
CVE-2018-8034
|
Low: host name verification missing in WebSocket client |
Not vulnerable |