Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@5.5.33
purl pkg:maven/org.apache.tomcat/tomcat@5.5.33
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2011-1184

Moderate: Multiple weaknesses in HTTP DIGEST authentication There are no reported fixed by versions.
CVE-2011-2204

Low: Information disclosure There are no reported fixed by versions.
CVE-2011-2526

Low: Information disclosure There are no reported fixed by versions.
CVE-2011-2729

Important: Information disclosure There are no reported fixed by versions.
CVE-2011-3190

Important: Authentication bypass and information disclosure There are no reported fixed by versions.
GHSA-c38m-v4m2-524v
Aliases:
CVE-2011-3190
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-f7w7-6pjc-wwm6
Apache Tomcat affected by vulnerability in TLS and SSL protocol The TLS protocol, and the SSL protocol 3.0 and possibly … CVE-2009-3555
GHSA-gvgc-rxmh-5hvw
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment The `Double.parseDouble` method in Java Runtime Environment … CVE-2010-4476