Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@6.0.30 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2012-4431
|
Important: Bypass of CSRF prevention filter | There are no reported fixed by versions. |
|
CVE-2011-3375
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-2729
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-0534
|
Important: Remote Denial Of Service | There are no reported fixed by versions. |
|
GHSA-rp8h-vr48-4j8p
Aliases: CVE-2011-3375 |
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does … | There are no reported fixed by versions. |
|
GHSA-43v2-6grp-9pp9
Aliases: CVE-2011-0534 |
Apache Tomcat does not enforce the maxHttpHeaderSize limit Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-0013
|
Low: Cross-site scripting | |
|
CVE-2010-4172
|
Moderate: Cross-site scripting | |
|
CVE-2010-3718
|
Low: SecurityManager file permission bypass | |
|
GHSA-3p86-xgrq-m6p6
|
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager … |
CVE-2011-0013
|
|
GHSA-fj6c-prgj-gr3r
|
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, … |
CVE-2010-3718
|