Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@4.1.36 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2005-3164
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2007-1355
|
Moderate: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-2449
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-2450
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-3382
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-3383
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-3385
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-5333
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-5461
|
Important: Information disclosure | There are no reported fixed by versions. |
|
GHSA-wjwr-3jch-479j
Aliases: CVE-2007-3383 |
Apache Tomcat SendMailServlet XSS Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (`examples/jsp/mail/sendmail.jsp`) in Apache Tomcat 4.0.0 … | There are no reported fixed by versions. |
|
GHSA-qff8-g48j-pwpw
Aliases: CVE-2007-3382 |
Apache Tomcat treats single quotes as delimiters in cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, … | There are no reported fixed by versions. |
|
GHSA-qhqv-q4xg-f6g7
Aliases: CVE-2005-3164 |
Apache Tomcat AJP Connector Information Leak The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as … | There are no reported fixed by versions. |
|
GHSA-6j8f-66vh-39mj
Aliases: CVE-2007-3385 |
Apache Tomcat Mishandles Character Sequence in Cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to … | There are no reported fixed by versions. |
|
GHSA-5c5p-jxvx-x7j2
Aliases: CVE-2007-2450 |
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … | There are no reported fixed by versions. |
|
GHSA-cww4-vj5r-rx57
Aliases: CVE-2007-5333 |
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2005-2090
|
Important: Information disclosure | |
|
CVE-2007-0450
|
Important: Directory traversal | |
|
CVE-2007-1358
|
Low: Cross-site scripting |