Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@6.0.20 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2009-2693
|
Low: Arbitrary file deletion and/or alteration on deploy | There are no reported fixed by versions. |
|
CVE-2009-2902
|
Low: Unexpected file deletion in work directory | There are no reported fixed by versions. |
|
CVE-2009-3548
|
Low: Insecure default password | There are no reported fixed by versions. |
|
CVE-2009-2693
Aliases: GHSA-ggx9-4728-588r |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 … | There are no reported fixed by versions. |
|
CVE-2009-2901
Aliases: GHSA-hjfh-7c4v-7q8h |
Improper Authentication in Apache Tomcat The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy … | There are no reported fixed by versions. |
|
GHSA-8wch-9gcg-v2pr
Aliases: CVE-2009-2902 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat Directory traversal vulnerability in Apache Tomcat … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2008-5515
|
Important: Information Disclosure | |
|
CVE-2009-0033
|
Important: Denial of Service | |
|
CVE-2009-0580
|
Low: Information disclosure | |
|
CVE-2009-0781
|
Low: Cross-site scripting | |
|
CVE-2009-0783
|
Low: Information disclosure | |
|
GHSA-9737-qmgc-hfr9
|
Directory Traversal in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions … |
CVE-2008-5515
|
|
CVE-2009-0783
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … |
GHSA-hhjg-g8xq-hhr3
|
|
GHSA-j788-fx57-99wp
|
Cross-site scripting in Apache Tomcat Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application … |
CVE-2009-0781
|
|
GHSA-hhjg-g8xq-hhr3
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and … |
CVE-2009-0783
|