Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@6.0.16 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-8745
|
Important: Information Disclosure | There are no reported fixed by versions. |
|
CVE-2008-1232
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2008-1947
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2008-2370
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2016-6816
Aliases: GHSA-jc7p-5r39-9477 |
Improper Input Validation The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-f98p-9pp6-7q6c
Aliases: CVE-2008-1947 |
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 … | There are no reported fixed by versions. |
|
GHSA-q74x-qqhr-f8rx
Aliases: CVE-2008-1232 |
Apache Tomcat Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and … | There are no reported fixed by versions. |
|
GHSA-m7xj-ccqc-p4g2
Aliases: CVE-2008-2938 |
Apache Tomcat Directory Traversal vulnerability Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through … | There are no reported fixed by versions. |
|
GHSA-m8h8-6rvg-f4mg
Aliases: CVE-2008-2370 |
Apache Tomcat Path Traversal Vulnerability Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a `RequestDispatcher` … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2007-5333
|
Low: Session hi-jacking | |
|
CVE-2007-5342
|
Low: Elevated privileges | |
|
CVE-2007-5461
|
Important: Information disclosure | |
|
CVE-2007-6286
|
Important: Data integrity | |
|
CVE-2008-0002
|
Important: Information disclosure | |
|
GHSA-5x5f-9r6q-q7mh
|
Apache Tomcat Sensitive Information Disclosure Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when … |
CVE-2008-0002
|