Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.47
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.47
Next non-vulnerable version 9.0.122
Latest non-vulnerable version 11.0.26
Risk score 10.0
Vulnerabilities affecting this package (11)
Advisory Summary Fixed in package version
CVE-2020-1938

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats …
9.0.31
Vulnerable
9.0.33
Vulnerable
9.0.35
Vulnerable
8.5.51
Vulnerable
8.5.53
Vulnerable
8.5.55
Vulnerable
8.5.56
Vulnerable
8.5.57
Vulnerable
7.0.100
Vulnerable
7.0.103
Vulnerable
7.0.104
Vulnerable
9.0.34
Vulnerable
9.0.36
Vulnerable
9.0.37
Vulnerable
CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …
7.0.99
Vulnerable
7.0.90
Vulnerable
7.0.91
Vulnerable
7.0.94
Vulnerable
7.0.96
Vulnerable
7.0.100
Vulnerable
7.0.103
Vulnerable
7.0.104
Vulnerable
GHSA-475f-74wp-pqv5
Aliases:
CVE-2014-0075
Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, …
7.0.53
Vulnerable
CVE-2020-1938

Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache …
9.0.31
Vulnerable
8.5.51
Vulnerable
7.0.100
Vulnerable
CVE-2020-13935

Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache …
8.5.57
Vulnerable
7.0.105
Vulnerable
9.0.37
Vulnerable
10.0.2
Vulnerable
CVE-2020-1935

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code …
9.0.31
Vulnerable
8.5.51
Vulnerable
7.0.100
Vulnerable
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
10.0.0-M10
Vulnerable
9.0.40
Vulnerable
8.5.60
Vulnerable
7.0.107
Vulnerable
GHSA-qq5r-98hh-rxc9
Aliases:
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …
9.0.113
Vulnerable
CVE-2014-0050

Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …
7.0.52
Vulnerable
8.0.3
Vulnerable
7.0.52
Vulnerable
8.0.3
Vulnerable
GHSA-jc7p-5r39-9477
Aliases:
CVE-2016-6816
Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, …
7.0.73
Vulnerable
7.0.73
Vulnerable
7.0.73
Vulnerable
GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
9.0.116
Vulnerable
11.0.20
Vulnerable
9.0.116
Vulnerable
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2013-4286
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, …
CVE-2011-1475
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers …
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The …
CVE-2019-0199
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS …