Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@4.1.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2008-5515
|
Important: Information Disclosure | There are no reported fixed by versions. |
|
CVE-2009-0033
|
Important: Denial of Service | There are no reported fixed by versions. |
|
CVE-2009-0580
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2009-0781
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2009-0783
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2008-0128
|
Moderate: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2008-1232
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2008-2370
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2007-3382
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-3385
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-5333
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2008-3271
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2002-1567
|
Moderate: Cross-site scripting | There are no reported fixed by versions. |
|
GHSA-86fp-jgwm-wgj5
Aliases: CVE-2002-1567 |
Apache Tomcat XSS Vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script … | There are no reported fixed by versions. |
|
GHSA-pm78-wxxf-fw98
Aliases: CVE-2006-7196 |
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, … | There are no reported fixed by versions. |
|
GHSA-5cw4-ggx9-36vg
Aliases: CVE-2009-0033 |
Apache Tomcat Denial of Service via Malformed Request Headers Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through … | There are no reported fixed by versions. |
|
GHSA-wjwr-3jch-479j
Aliases: CVE-2007-3383 |
Apache Tomcat SendMailServlet XSS Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (`examples/jsp/mail/sendmail.jsp`) in Apache Tomcat 4.0.0 … | There are no reported fixed by versions. |
|
GHSA-xmc9-6p56-3c4v
Aliases: CVE-2007-1358 |
Apache Tomcat XSS In Accept-Language Headers Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and … | There are no reported fixed by versions. |
|
GHSA-qff8-g48j-pwpw
Aliases: CVE-2007-3382 |
Apache Tomcat treats single quotes as delimiters in cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, … | There are no reported fixed by versions. |
|
GHSA-9737-qmgc-hfr9
Aliases: CVE-2008-5515 |
Directory Traversal in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions … | There are no reported fixed by versions. |
|
GHSA-qhqv-q4xg-f6g7
Aliases: CVE-2005-3164 |
Apache Tomcat AJP Connector Information Leak The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as … | There are no reported fixed by versions. |
|
GHSA-6j8f-66vh-39mj
Aliases: CVE-2007-3385 |
Apache Tomcat Mishandles Character Sequence in Cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to … | There are no reported fixed by versions. |
|
GHSA-w227-xcfx-3pj8
Aliases: CVE-2009-0580 |
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when … | There are no reported fixed by versions. |
|
GHSA-v5p2-vg3c-pmrr
Aliases: CVE-2007-5461 |
Apache Tomcat Path Traversal Vulnerability Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, … | There are no reported fixed by versions. |
|
CVE-2009-0783
Aliases: GHSA-hhjg-g8xq-hhr3 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … | There are no reported fixed by versions. |
|
GHSA-jxcv-v856-j5vg
Aliases: CVE-2002-1148 |
Apache Tomcat Source Code Disclosure The default servlet (`org.apache.catalina.servlets.DefaultServlet`) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to … | There are no reported fixed by versions. |
|
GHSA-j788-fx57-99wp
Aliases: CVE-2009-0781 |
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application … | There are no reported fixed by versions. |
|
GHSA-hhjg-g8xq-hhr3
Aliases: CVE-2009-0783 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … | There are no reported fixed by versions. |
|
GHSA-q74x-qqhr-f8rx
Aliases: CVE-2008-1232 |
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and … | There are no reported fixed by versions. |
|
GHSA-5c5p-jxvx-x7j2
Aliases: CVE-2007-2450 |
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … | There are no reported fixed by versions. |
|
GHSA-m7xj-ccqc-p4g2
Aliases: CVE-2008-2938 |
Apache Tomcat Directory Traversal vulnerability Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through … | There are no reported fixed by versions. |
|
GHSA-cww4-vj5r-rx57
Aliases: CVE-2007-5333 |
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does … | There are no reported fixed by versions. |
|
GHSA-m8h8-6rvg-f4mg
Aliases: CVE-2008-2370 |
Apache Tomcat Path Traversal Vulnerability Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a `RequestDispatcher` … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2003-0866
|
Important: Denial of service | |
|
CVE-2002-2006
|
Low: Information disclosure | |
|
GHSA-8g4f-fh7f-4fwh
|
Apache Tomcat Default Installation Reveals Sensitive Information The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 … |
CVE-2002-2006
|
|
GHSA-7wj2-48c4-2684
|
Apache Tomcat Denial of Service vulnerability in the Catalina package The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.6 … |
CVE-2003-0866
|