Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.39
purl pkg:maven/org.apache.tomcat/tomcat@6.0.39
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2014-0075

Important: Denial of Service There are no reported fixed by versions.
CVE-2014-0096

Important: Information disclosure There are no reported fixed by versions.
CVE-2014-0099

Important: Information disclosure There are no reported fixed by versions.
CVE-2014-0119

Low: Information Disclosure There are no reported fixed by versions.
Vulnerabilities fixed by this package (8)

Advisory Summary Aliases
CVE-2013-1571
Low: Frame injection in documentation Javadoc
CVE-2013-4286
Important: Information disclosure
CVE-2013-4322
Important: Denial of service
CVE-2013-4590
Low: Information disclosure
CVE-2014-0033
Low: Session fixation
GHSA-wq2p-q66w-q8gp
Apache Tomcat Denial of Service vulnerability Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer … CVE-2013-4322
GHSA-j448-j653-r3vj
Apache Tomcat is vulnerable to HTTP request-smuggling Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an … CVE-2013-4286
GHSA-87w9-x2c3-hrjj
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x … CVE-2013-4590