Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2022-25762
|
Improper Resource Shutdown or Release If a web application sends a WebSocket message concurrently with the WebSocket connection closing when … |
Vulnerable Vulnerable |
|
CVE-2020-17527
|
Information Exposure While investigating bug it was discovered that Apache Tomcat to to to could re-use an HTTP request header … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-jjpq-gp5q-8q6w
Aliases: CVE-2019-0221 |
Cross-site scripting in Apache Tomcat The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 … |
Vulnerable Vulnerable |
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … | There are no reported fixed by versions. |
|
GHSA-344f-f5vg-2jfj
Aliases: CVE-2020-9484 |
Potential remote code execution in Apache Tomcat When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to … |
Vulnerable Vulnerable Vulnerable |