Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@4.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2007-2449
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-3383
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-5461
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2005-2090
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2007-0450
|
Important: Directory traversal | There are no reported fixed by versions. |
|
CVE-2007-1358
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2006-7196
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2006-3835
|
Low: Directory listing | There are no reported fixed by versions. |
|
CVE-2005-4838
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2005-3510
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2002-1394
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2002-0682
|
Moderate: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2002-1148
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2002-0935
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2003-0866
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2002-2006
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2002-2009
|
Low: Information disclosure | There are no reported fixed by versions. |
|
GHSA-pqr5-9v2j-44xg
Aliases: CVE-2002-2272 |
Apache Tomcat DoS via Malicious Get Request Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, … | There are no reported fixed by versions. |
|
GHSA-r6cf-cr44-m8rr
Aliases: CVE-2002-2009 |
Apache Tomcat Leaks Pathname Information via Error Message Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path … | There are no reported fixed by versions. |
|
GHSA-8g4f-fh7f-4fwh
Aliases: CVE-2002-2006 |
Apache Tomcat Default Installation Reveals Sensitive Information The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 … | There are no reported fixed by versions. |
|
GHSA-pm78-wxxf-fw98
Aliases: CVE-2006-7196 |
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, … | There are no reported fixed by versions. |
|
GHSA-wjwr-3jch-479j
Aliases: CVE-2007-3383 |
Apache Tomcat SendMailServlet XSS Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (`examples/jsp/mail/sendmail.jsp`) in Apache Tomcat 4.0.0 … | There are no reported fixed by versions. |
|
GHSA-xmc9-6p56-3c4v
Aliases: CVE-2007-1358 |
Apache Tomcat XSS In Accept-Language Headers Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and … | There are no reported fixed by versions. |
|
GHSA-f2gq-p6qv-ccw4
Aliases: CVE-2005-2090 |
Tomcat Vulnerable to Web Cache Poisoning Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the … | There are no reported fixed by versions. |
|
GHSA-hc39-rjwp-qffq
Aliases: CVE-2007-2449 |
Apache Tomcat XSS Vulnerabilities in Examples Web Application Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples … | There are no reported fixed by versions. |
|
GHSA-v5p2-vg3c-pmrr
Aliases: CVE-2007-5461 |
Apache Tomcat Path Traversal Vulnerability Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, … | There are no reported fixed by versions. |
|
GHSA-jxcv-v856-j5vg
Aliases: CVE-2002-1148 |
Apache Tomcat Source Code Disclosure The default servlet (`org.apache.catalina.servlets.DefaultServlet`) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to … | There are no reported fixed by versions. |
|
GHSA-5c5p-jxvx-x7j2
Aliases: CVE-2007-2450 |
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2002-0493
|
Moderate: Security manager bypass |