Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.29
purl pkg:maven/org.apache.tomcat/tomcat@6.0.29
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2011-0013

Low: Cross-site scripting There are no reported fixed by versions.
CVE-2010-4172

Moderate: Cross-site scripting There are no reported fixed by versions.
CVE-2010-3718

Low: SecurityManager file permission bypass There are no reported fixed by versions.
GHSA-c78g-qwpw-2jgv
Aliases:
CVE-2010-4172
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Multiple cross-site scripting (XSS) vulnerabilities in the Manager application … There are no reported fixed by versions.
CVE-2010-3718
Aliases:
GHSA-fj6c-prgj-gr3r
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, … There are no reported fixed by versions.
This package is not known to fix any advisories.