Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@6.0.36 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-2067
|
Important: Session fixation | There are no reported fixed by versions. |
|
CVE-2012-3544
|
Important: Denial of service | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2012-2733
|
Important: Denial of service | |
|
CVE-2012-3439
|
Moderate: DIGEST authentication weakness | |
|
CVE-2012-3546
|
Important: Bypass of security constraints | |
|
CVE-2012-4431
|
Important: Bypass of CSRF prevention filter | |
|
CVE-2012-4534
|
Important: Denial of service | |
|
GHSA-99rf-92v6-cwx4
|
Improper Access Control in Apache Tomcat The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … |
CVE-2012-5885
|
|
GHSA-jgm2-m5cg-f66g
|
Authentication Bypass in Apache Tomcat org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is … |
CVE-2012-3546
|
|
GHSA-28cq-6rmx-pjq4
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, … |
CVE-2012-5887
|
|
GHSA-76vr-72mv-mf3q
|
Cross-Site Request Forgery in Apache Tomcat org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers … |
CVE-2012-4431
|
|
CVE-2012-5886
|
Improper Authentication The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before … |
GHSA-9xrj-439h-62hg
|