Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.14
purl pkg:maven/org.apache.tomcat/tomcat@6.0.14
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2007-5333

Low: Session hi-jacking There are no reported fixed by versions.
CVE-2007-5461

Important: Information disclosure There are no reported fixed by versions.
GHSA-v5p2-vg3c-pmrr
Aliases:
CVE-2007-5461
Apache Tomcat Path Traversal Vulnerability Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, … There are no reported fixed by versions.
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2007-2449
Low: Cross-site scripting
CVE-2007-2450
Low: Cross-site scripting
CVE-2007-3382
Low: Session hi-jacking
CVE-2007-3385
Low: Session hi-jacking
CVE-2007-3386
Low: Cross-site scripting
GHSA-5c5p-jxvx-x7j2
Apache Tomcat vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web … CVE-2007-2450