Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.45
purl pkg:maven/org.apache.tomcat/tomcat@6.0.45
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.4
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
CVE-2016-6797

Low: Unrestricted Access to Global Resources There are no reported fixed by versions.
CVE-2016-6796

Low: Security Manager Bypass There are no reported fixed by versions.
CVE-2016-6794

Low: System Property Disclosure There are no reported fixed by versions.
CVE-2016-5018

Low: Security Manager Bypass There are no reported fixed by versions.
CVE-2016-0762

Low: Timing Attack There are no reported fixed by versions.
GHSA-wxcp-f2c8-x6xv
Aliases:
CVE-2016-0762
Observable Discrepancy in Apache Tomcat The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to … There are no reported fixed by versions.
GHSA-3mjp-p938-4329
Aliases:
CVE-2016-6796
Apache Tomcat vulnerable to SecurityManager bypass A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, … There are no reported fixed by versions.
Vulnerabilities fixed by this package (9)

Advisory Summary Aliases
CVE-2015-5174
Low: Limited directory traversal
CVE-2015-5345
Low: Directory disclosure
CVE-2016-0706
Low: Security Manager bypass
CVE-2016-0714
Moderate: Security Manager bypass
CVE-2015-5174
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Directory traversal vulnerability in RequestUtil.java in Apache Tomcat … GHSA-6qr6-x7jm-x2q6
GHSA-rh8q-vjgf-gf74
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat The Mapper component in Apache Tomcat 6.x before … CVE-2015-5345
CVE-2015-5345
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat The Mapper component in Apache Tomcat 6.x before … GHSA-rh8q-vjgf-gf74
GHSA-6vx3-hr43-cfrh
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x … CVE-2016-0706
GHSA-6qr6-x7jm-x2q6
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Directory traversal vulnerability in RequestUtil.java in Apache Tomcat … CVE-2015-5174