Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.35
purl pkg:maven/org.apache.tomcat/tomcat@6.0.35
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2012-2733

Important: Denial of service There are no reported fixed by versions.
CVE-2012-3439

Moderate: DIGEST authentication weakness There are no reported fixed by versions.
CVE-2012-3546

Important: Bypass of security constraints There are no reported fixed by versions.
CVE-2012-4431

Important: Bypass of CSRF prevention filter There are no reported fixed by versions.
CVE-2012-4534

Important: Denial of service There are no reported fixed by versions.
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2011-3375
Important: Information disclosure
CVE-2011-3190
Important: Authentication bypass and information disclosure
CVE-2012-0022
Important: Denial of service
GHSA-wr3m-gw98-mc3j
Improper Input Validation in Apache Tomcat Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values … CVE-2011-4858
GHSA-pvjh-7h8q-q56r
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header The default configuration of Apache Tomcat 6.x does not include … CVE-2010-4312
GHSA-rp8h-vr48-4j8p
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does … CVE-2011-3375