Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@4.1.40
purl pkg:maven/org.apache.tomcat/tomcat@4.1.40
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-qrcx-p4rr-g48h
Aliases:
CVE-2005-4836
Apache Tomcat allows remote attackers to read JSP source files The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does … There are no reported fixed by versions.
Vulnerabilities fixed by this package (7)

Advisory Summary Aliases
CVE-2008-5515
Important: Information Disclosure
CVE-2009-0033
Important: Denial of Service
CVE-2009-0580
Low: Information disclosure
CVE-2009-0781
Low: Cross-site scripting
CVE-2009-0783
Low: Information disclosure
GHSA-9737-qmgc-hfr9
Directory Traversal in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions … CVE-2008-5515
GHSA-w227-xcfx-3pj8
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when … CVE-2009-0580