Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@5.5.27
purl pkg:maven/org.apache.tomcat/tomcat@5.5.27
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 1.9
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
CVE-2008-5515

Important: Information Disclosure There are no reported fixed by versions.
CVE-2009-0033

Important: Denial of Service There are no reported fixed by versions.
CVE-2009-0781

Low: Cross-site scripting There are no reported fixed by versions.
CVE-2009-0783

Low: Information disclosure There are no reported fixed by versions.
GHSA-5cw4-ggx9-36vg
Aliases:
CVE-2009-0033
Apache Tomcat Denial of Service via Malformed Request Headers Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through … There are no reported fixed by versions.
CVE-2009-0783
Aliases:
GHSA-hhjg-g8xq-hhr3
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … There are no reported fixed by versions.
GHSA-j788-fx57-99wp
Aliases:
CVE-2009-0781
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application … There are no reported fixed by versions.
GHSA-hhjg-g8xq-hhr3
Aliases:
CVE-2009-0783
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … There are no reported fixed by versions.
Vulnerabilities fixed by this package (8)

Advisory Summary Aliases
CVE-2008-1232
Low: Cross-site scripting
CVE-2008-1947
Low: Cross-site scripting
CVE-2008-2370
Important: Information disclosure
CVE-2008-1947
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 … GHSA-f98p-9pp6-7q6c
GHSA-f98p-9pp6-7q6c
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 … CVE-2008-1947
GHSA-q74x-qqhr-f8rx
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and … CVE-2008-1232
GHSA-m7xj-ccqc-p4g2
Apache Tomcat Directory Traversal vulnerability Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through … CVE-2008-2938
GHSA-m8h8-6rvg-f4mg
Apache Tomcat Path Traversal Vulnerability Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a `RequestDispatcher` … CVE-2008-2370