Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@5.5.25 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2007-5333
|
Low: Session hi-jacking | There are no reported fixed by versions. |
|
CVE-2007-5342
|
Low: Elevated privileges | There are no reported fixed by versions. |
|
CVE-2007-5461
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2007-6286
|
Important: Data integrity | There are no reported fixed by versions. |
|
GHSA-qrj4-rmqg-4hcp
Aliases: CVE-2007-6286 |
Apache Tomcat Does Not Properly Handle Empty Requests Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native … | There are no reported fixed by versions. |
|
GHSA-v5p2-vg3c-pmrr
Aliases: CVE-2007-5461 |
Apache Tomcat Path Traversal Vulnerability Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, … | There are no reported fixed by versions. |
|
GHSA-cww4-vj5r-rx57
Aliases: CVE-2007-5333 |
Exposure of Sensitive Information in Apache Tomcat Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2007-2449
|
Low: Cross-site scripting | |
|
CVE-2007-2450
|
Low: Cross-site scripting | |
|
CVE-2007-3382
|
Low: Session hi-jacking | |
|
CVE-2007-3385
|
Low: Session hi-jacking | |
|
CVE-2007-3386
|
Low: Cross-site scripting | |
|
GHSA-5c5p-jxvx-x7j2
|
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … |
CVE-2007-2450
|