Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@7.0.76
purl pkg:maven/org.apache.tomcat/tomcat-util@7.0.76
Next non-vulnerable version 7.0.107
Latest non-vulnerable version 11.0.25
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2019-0232

Improper Input Validation When running on Windows with `enableCmdLineArguments` enabled, the CGI Servlet in Apache Tomcat is vulnerable to Remote …
7.0.94
Vulnerable
8.5.40
Vulnerable
9.0.19
Vulnerable
CVE-2019-0221

Cross-site Scripting The SSI `printenv` command in Apache Tomcat echoes user provided data without escaping and is, therefore, vulnerable to …
7.0.94
Vulnerable
8.5.40
Vulnerable
9.0.19
Vulnerable
CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …
8.5.31
Vulnerable
9.0.8
Vulnerable
7.0.88
Vulnerable
8.0.52
Not vulnerable
CVE-2020-1935

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat, the HTTP header parsing code used an approach to …
7.0.100
Vulnerable
8.5.51
Vulnerable
9.0.31
Vulnerable
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
8.5.60
Vulnerable
9.0.40
Vulnerable
7.0.107
Not vulnerable
10.0.2
Vulnerable
This package is not known to fix any advisories.