Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-prc3-7f44-w48j
Aliases: CVE-2014-0119 |
Missing XML Validation in Apache Tomcat Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly … | There are no reported fixed by versions. |
|
GHSA-qprx-q2r7-3rx6
Aliases: CVE-2014-0096 |
Improper Input Validation in Apache Tomcat java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and … | There are no reported fixed by versions. |
|
GHSA-cw54-59pw-4g8c
Aliases: CVE-2016-8735 |
Apache Tomcat Improper Access Control vulnerability Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x … |
Vulnerable Vulnerable |
|
GHSA-v646-rx6w-r3qq
Aliases: CVE-2016-5388 |
Improper Access Control in Apache Tomcat Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is … |
Vulnerable Vulnerable |
|
CVE-2016-6797
Aliases: GHSA-q6x7-f33r-3wxx |
Incorrect Authorization The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-3vx3-xf6q-r5xp
Aliases: CVE-2017-5648 |
Exposure of Resource to Wrong Sphere in Apache Tomcat While investigating bug 60718, it was noticed that some calls to … |
Vulnerable |
|
GHSA-344f-f5vg-2jfj
Aliases: CVE-2020-9484 |
Potential remote code execution in Apache Tomcat When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to … |
Vulnerable Vulnerable Vulnerable |