Search for packages
| purl | pkg:apache/tomcat@8.5.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-0762
|
Low: Timing Attack |
Vulnerable |
|
CVE-2016-3092
|
Moderate: Denial of Service |
Not vulnerable |
|
CVE-2016-5018
|
Low: Security Manager Bypass |
Vulnerable |
|
CVE-2016-6794
|
Low: System Property Disclosure |
Vulnerable |
|
CVE-2016-6796
|
Low: Security Manager Bypass |
Vulnerable |
|
CVE-2016-6797
|
Low: Unrestricted Access to Global Resources |
Vulnerable |
|
CVE-2016-6816
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2016-6817
|
Important: Denial of Service |
Vulnerable |
|
CVE-2016-8735
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2016-8745
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-12617
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2017-5647
|
Important: Information Disclosure |
Not vulnerable |
|
CVE-2017-5648
|
Low: Information Disclosure |
Vulnerable |
|
CVE-2017-5650
|
Important: Denial of Service |
Not vulnerable |
|
CVE-2017-5651
|
Important: Information Disclosure |
Not vulnerable |
|
CVE-2017-5664
|
Important: Security Constraint Bypass |
Vulnerable |
|
CVE-2017-7674
|
Moderate: Cache Poisoning |
Vulnerable |
|
CVE-2017-7675
|
Important: Security Constraint Bypass |
Vulnerable |
|
CVE-2018-11784
|
Moderate: Open Redirect |
Not vulnerable |
|
CVE-2018-1304
|
Important: Security constraints mapped to context root are ignored |
Not vulnerable |
|
CVE-2018-1305
|
Important: Security constraint annotations applied too late |
Not vulnerable |
|
CVE-2018-1336
|
Important: A bug in the UTF-8 decoder can lead to DoS |
Vulnerable |
|
CVE-2018-8034
|
Low: host name verification missing in WebSocket client |
Not vulnerable |
|
CVE-2019-0199
|
Important: Denial of Service |
Vulnerable |
|
CVE-2019-0221
|
Low: XSS in SSI printenv |
Vulnerable |
|
CVE-2019-0232
|
Important: Remote Code Execution on Windows |
Vulnerable |
|
CVE-2019-10072
|
Important: Denial of Service |
Not vulnerable |
|
CVE-2019-12418
|
Moderate: Local Privilege Escalation |
Vulnerable |
|
CVE-2019-17563
|
Low: Session fixation |
Vulnerable |
|
CVE-2020-11996
|
Important: HTTP/2 DoS |
Vulnerable |
|
CVE-2020-13935
|
Important: WebSocket DoS |
Vulnerable |
|
CVE-2020-13943
|
Moderate: HTTP/2 request mix-up |
Not vulnerable |
|
CVE-2020-17527
|
Moderate: HTTP/2 request header mix-up |
Vulnerable |
|
CVE-2020-1935
|
Low: HTTP Request Smuggling |
Not vulnerable |
|
CVE-2020-1938
|
Important: AJP Request Injection and potential Remote Code Execution |
Not vulnerable |
|
CVE-2020-9484
|
Low: Fix for CVE-2020-9484 was incomplete |
Vulnerable Vulnerable |
|
CVE-2021-24122
|
Important: Information disclosure |
Vulnerable |
|
CVE-2021-25122
|
Important: Request mix-up with h2c |
Vulnerable |
|
CVE-2021-30640
|
Low: Authentication weakness |
Vulnerable |
|
CVE-2021-33037
|
Important: Request Smuggling |
Not vulnerable |
|
CVE-2021-41079
|
Important: Denial of Service |
Vulnerable |
|
CVE-2021-43980
|
High: Information Disclosure |
Vulnerable |
|
CVE-2022-25762
|
Important: Request mix-up |
Not vulnerable |
|
CVE-2022-42252
|
Low: Apache Tomcat request smuggling |
Vulnerable |
|
CVE-2023-24998
|
Important: Apache Tomcat denial of service |
Vulnerable |
|
CVE-2023-28708
|
Important: Apache Tomcat information disclosure |
Not vulnerable |
|
CVE-2023-41080
|
Moderate: Open redirect |
Vulnerable |
|
CVE-2023-42795
|
Important: Information Disclosure |
Not vulnerable |
|
CVE-2023-44487
|
Important: Denial of Service |
Not vulnerable |
|
CVE-2023-45648
|
Important: Request smuggling |
Not vulnerable |
|
CVE-2023-46589
|
Important: Request smuggling |
Not vulnerable |
|
CVE-2024-23672
|
Important: Denial of Service |
Not vulnerable |
|
CVE-2024-24549
|
Important: Denial of Service |
Not vulnerable |