Search for packages
| purl | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.0-M4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-p22x-g9px-3945
Aliases: CVE-2022-42252 |
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to … |
Vulnerable |
|
CVE-2020-11996
Aliases: GHSA-53hp-jpwq-2jgq |
Uncontrolled Resource Consumption in Apache Tomcat A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-j39c-c8hj-x4j3
Aliases: CVE-2021-25122 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat When responding to new h2c connection requests, Apache Tomcat … |
Vulnerable Vulnerable |
|
GHSA-2rvv-w9r2-rg7m
Aliases: CVE-2021-24122 |
Information Disclosure in Apache Tomcat When serving resources from a network location using the NTFS file system, Apache Tomcat versions … |
Vulnerable Vulnerable |
|
GHSA-jgwr-3qm3-26f3
Aliases: CVE-2021-25329 |
Potential remote code execution in Apache Tomcat The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, … |
Vulnerable Vulnerable |
|
GHSA-53hp-jpwq-2jgq
Aliases: CVE-2020-11996 |
Uncontrolled Resource Consumption in Apache Tomcat A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, … |
Vulnerable Vulnerable |
|
GHSA-xjgh-84hx-56c5
Aliases: CVE-2017-12617 |
Unrestricted Upload of File with Dangerous Type Apache Tomcat When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, … |
Vulnerable |
|
GHSA-344f-f5vg-2jfj
Aliases: CVE-2020-9484 |
Potential remote code execution in Apache Tomcat When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to … |
Vulnerable Vulnerable Vulnerable |