Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@5.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2007-2449
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-2450
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-3382
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-3385
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-1355
|
Moderate: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2005-2090
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2007-0450
|
Important: Directory traversal | There are no reported fixed by versions. |
|
CVE-2007-1358
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2008-0128
|
Moderate: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2006-7195
|
Moderate: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2007-1858
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2006-7196
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2006-3835
|
Low: Directory listing | There are no reported fixed by versions. |
|
CVE-2005-3510
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2005-4838
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
GHSA-pm78-wxxf-fw98
Aliases: CVE-2006-7196 |
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, … | There are no reported fixed by versions. |
|
GHSA-f7w7-6pjc-wwm6
Aliases: CVE-2009-3555 |
Apache Tomcat affected by vulnerability in TLS and SSL protocol The TLS protocol, and the SSL protocol 3.0 and possibly … | There are no reported fixed by versions. |
|
GHSA-wfj7-mhr5-pcwq
Aliases: CVE-2006-3835 |
Apache Tomcat Reveals Directories Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (`;`) preceding … | There are no reported fixed by versions. |
|
GHSA-qff8-g48j-pwpw
Aliases: CVE-2007-3382 |
Apache Tomcat treats single quotes as delimiters in cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, … | There are no reported fixed by versions. |
|
GHSA-f2gq-p6qv-ccw4
Aliases: CVE-2005-2090 |
Tomcat Vulnerable to Web Cache Poisoning Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the … | There are no reported fixed by versions. |
|
GHSA-hc39-rjwp-qffq
Aliases: CVE-2007-2449 |
Apache Tomcat XSS Vulnerabilities in Examples Web Application Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples … | There are no reported fixed by versions. |
|
GHSA-6j8f-66vh-39mj
Aliases: CVE-2007-3385 |
Apache Tomcat Mishandles Character Sequence in Cookies Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to … | There are no reported fixed by versions. |
|
GHSA-w227-xcfx-3pj8
Aliases: CVE-2009-0580 |
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when … | There are no reported fixed by versions. |
|
GHSA-v5p2-vg3c-pmrr
Aliases: CVE-2007-5461 |
Apache Tomcat Path Traversal Vulnerability Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, … | There are no reported fixed by versions. |
|
GHSA-5c5p-jxvx-x7j2
Aliases: CVE-2007-2450 |
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … | There are no reported fixed by versions. |
|
GHSA-p57v-p3fx-qgwm
Aliases: CVE-2006-7195 |
Apache Tomcat XSS Vulnerability Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 … | There are no reported fixed by versions. |
|
GHSA-c38m-v4m2-524v
Aliases: CVE-2011-3190 |
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, … | There are no reported fixed by versions. |