Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.37
purl pkg:maven/org.apache.tomcat/tomcat@6.0.37
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2013-1571

Low: Frame injection in documentation Javadoc There are no reported fixed by versions.
CVE-2013-4286

Important: Information disclosure There are no reported fixed by versions.
CVE-2013-4322

Important: Denial of service There are no reported fixed by versions.
CVE-2013-4590

Low: Information disclosure There are no reported fixed by versions.
CVE-2014-0033

Low: Session fixation There are no reported fixed by versions.
Vulnerabilities fixed by this package (4)

Advisory Summary Aliases
CVE-2013-2067
Important: Session fixation
CVE-2012-3544
Important: Denial of service
GHSA-6m48-jxwx-76q7
Improper Authentication in Apache Tomcat java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before … CVE-2013-2067
GHSA-qfxv-3ppc-7qg5
Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions Apache Tomcat 6.x before 6.0.37 and … CVE-2012-3544