Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@7.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-30640
|
Low: Authentication weakness |
Vulnerable |
|
CVE-2020-9484
|
Low: Fix for CVE-2020-9484 was incomplete |
Vulnerable Vulnerable |
|
CVE-2021-24122
|
Important: Information disclosure |
Vulnerable |
|
CVE-2020-1938
|
High: AJP Request Injection and potential Remote Code Execution |
Vulnerable |
|
CVE-2020-1935
|
Low: HTTP Request Smuggling |
Vulnerable |
|
CVE-2019-17563
|
Low: Session fixation |
Vulnerable |
|
CVE-2019-12418
|
Moderate: Local Privilege Escalation |
Vulnerable |
|
CVE-2019-0232
|
Important: Remote Code Execution on Windows |
Vulnerable |
|
CVE-2019-0221
|
Low: XSS in SSI printenv |
Vulnerable |
|
CVE-2018-1305
|
Important: Security constraint annotations applied too late |
Vulnerable |
|
CVE-2018-1304
|
Important: Security constraints mapped to context root are ignored |
Vulnerable |
|
CVE-2017-12617
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2017-12616
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-12615
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2017-5664
|
Important: Security Constraint Bypass |
Vulnerable |
|
CVE-2017-5647
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-5648
|
Low: Information Disclosure |
Vulnerable |
|
CVE-2016-8745
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2016-8735
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2016-6816
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2016-6797
|
Low: Unrestricted Access to Global Resources |
Vulnerable |
|
CVE-2016-6796
|
Low: Security Manager Bypass |
Vulnerable |
|
CVE-2016-6794
|
Low: System Property Disclosure |
Vulnerable |
|
CVE-2016-5018
|
Low: Security Manager Bypass |
Vulnerable |
|
CVE-2016-0762
|
Low: Timing Attack |
Vulnerable |
|
CVE-2016-3092
|
Moderate: Denial of Service |
Vulnerable |
|
CVE-2015-5345
|
Low: Directory disclosure |
Vulnerable |
|
CVE-2016-0706
|
Low: Security Manager bypass |
Vulnerable |
|
CVE-2016-0714
|
Moderate: Security Manager bypass |
Vulnerable |
|
CVE-2016-0763
|
Moderate: Security Manager bypass |
Vulnerable |
|
CVE-2015-5174
|
Low: Limited directory traversal |
Vulnerable |
|
CVE-2014-7810
|
Moderate: Security Manager bypass |
Vulnerable |
|
CVE-2014-0227
|
Important: Request Smuggling |
Vulnerable |
|
CVE-2014-0230
|
Low: Denial of Service |
Vulnerable |
|
CVE-2014-0119
|
Low: Information Disclosure |
Vulnerable |
|
CVE-2014-0075
|
Important: Denial of Service |
Vulnerable |
|
CVE-2014-0096
|
Important: Information disclosure |
Vulnerable |
|
CVE-2014-0099
|
Important: Information disclosure |
Vulnerable |
|
CVE-2014-0050
|
Important: Denial of Service |
Vulnerable |
|
CVE-2013-4322
|
Important: Denial of service |
Vulnerable |
|
CVE-2013-4590
|
Low: Information disclosure |
Vulnerable |
|
CVE-2013-4286
|
Important: Information disclosure |
Vulnerable |
|
CVE-2013-2071
|
Moderate: Information disclosure |
Vulnerable |
|
CVE-2013-4444
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2013-2067
|
Important: Session fixation | There are no reported fixed by versions. |
|
CVE-2012-4431
|
Important: Bypass of CSRF prevention filter | There are no reported fixed by versions. |
|
CVE-2012-3544
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2012-3439
|
Moderate: DIGEST authentication weakness | There are no reported fixed by versions. |
|
CVE-2012-3546
|
Important: Bypass of security constraints | There are no reported fixed by versions. |
|
CVE-2012-2733
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2012-4534
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2012-0022
|
Important: Denial of service | There are no reported fixed by versions. |
|
CVE-2011-3375
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-3376
|
Low: Privilege Escalation | There are no reported fixed by versions. |
|
CVE-2011-3190
|
Important: Authentication bypass and information disclosure | There are no reported fixed by versions. |
|
CVE-2011-2729
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-2526
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-2204
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-2481
|
Low: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-1475
|
Important: Information disclosure | There are no reported fixed by versions. |
|
CVE-2011-1184
|
Moderate: Multiple weaknesses in HTTP DIGEST authentication | There are no reported fixed by versions. |
|
CVE-2011-1088
|
Important: Security constraint bypass | There are no reported fixed by versions. |
|
CVE-2011-0534
|
Important: Remote Denial Of Service | There are no reported fixed by versions. |
|
CVE-2011-0013
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2010-4172
|
Low: Cross-site scripting | There are no reported fixed by versions. |
|
CVE-2010-3718
|
Low: SecurityManager file permission bypass | There are no reported fixed by versions. |
|
CVE-2010-2227
|
Important: Remote Denial Of Service and Information Disclosure Vulnerability | There are no reported fixed by versions. |
|
GHSA-9ggm-7897-x4mg
Aliases: CVE-2011-2526 |
Improper Input Validation in Apache Tomcat Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile … | There are no reported fixed by versions. |
|
GHSA-mg4v-rf8p-ghqq
Aliases: CVE-2011-1088 |
Apache Tomcat allows remote attackers to bypass intended access restrictions Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, … | There are no reported fixed by versions. |
|
GHSA-hffm-fqv4-w27r
Aliases: CVE-2011-5063 |
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … | There are no reported fixed by versions. |
|
GHSA-wq2p-q66w-q8gp
Aliases: CVE-2013-4322 |
Apache Tomcat Denial of Service vulnerability Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer … |
Vulnerable |
|
GHSA-99rf-92v6-cwx4
Aliases: CVE-2012-5885 |
Improper Access Control in Apache Tomcat The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … | There are no reported fixed by versions. |
|
GHSA-3p86-xgrq-m6p6
Aliases: CVE-2011-0013 |
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager … | There are no reported fixed by versions. |
|
GHSA-jgm2-m5cg-f66g
Aliases: CVE-2012-3546 |
Authentication Bypass in Apache Tomcat org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is … | There are no reported fixed by versions. |
|
GHSA-f7w7-6pjc-wwm6
Aliases: CVE-2009-3555 |
Apache Tomcat affected by vulnerability in TLS and SSL protocol The TLS protocol, and the SSL protocol 3.0 and possibly … | There are no reported fixed by versions. |
|
GHSA-fj6c-prgj-gr3r
Aliases: CVE-2010-3718 |
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, … | There are no reported fixed by versions. |
|
GHSA-6m48-jxwx-76q7
Aliases: CVE-2013-2067 |
Improper Authentication in Apache Tomcat java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before … | There are no reported fixed by versions. |
|
GHSA-j448-j653-r3vj
Aliases: CVE-2013-4286 |
Apache Tomcat is vulnerable to HTTP request-smuggling Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an … |
Vulnerable |
|
GHSA-gvgc-rxmh-5hvw
Aliases: CVE-2010-4476 |
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment The `Double.parseDouble` method in Java Runtime Environment … | There are no reported fixed by versions. |
|
GHSA-wr3m-gw98-mc3j
Aliases: CVE-2011-4858 |
Improper Input Validation in Apache Tomcat Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values … | There are no reported fixed by versions. |
|
GHSA-3p5r-7cw3-2m67
Aliases: CVE-2013-2071 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not … |
Vulnerable |
|
GHSA-c57p-3v2g-w9rg
Aliases: CVE-2011-2204 |
Insertion of Sensitive Information into Log File in Apache Tomcat Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x … | There are no reported fixed by versions. |
|
GHSA-42j3-498q-m6vp
Aliases: CVE-2014-0227 |
Improper Input Validation in Apache Tomcat `java/org/apache/coyote/http11/filters/ChunkedInputFilter.java` in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 … |
Vulnerable |
|
GHSA-r7c8-hghc-2mp8
Aliases: CVE-2011-2481 |
Apache Tomcat Allows Replacing of XML Parser Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser … | There are no reported fixed by versions. |
|
GHSA-qfxv-3ppc-7qg5
Aliases: CVE-2012-3544 |
Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions Apache Tomcat 6.x before 6.0.37 and … | There are no reported fixed by versions. |
|
GHSA-c78g-qwpw-2jgv
Aliases: CVE-2010-4172 |
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Multiple cross-site scripting (XSS) vulnerabilities in the Manager application … | There are no reported fixed by versions. |
|
GHSA-28cq-6rmx-pjq4
Aliases: CVE-2012-5887 |
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, … | There are no reported fixed by versions. |
|
GHSA-prc3-7f44-w48j
Aliases: CVE-2014-0119 |
Missing XML Validation in Apache Tomcat Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly … |
Vulnerable |
|
GHSA-q9xf-jwr4-v445
Aliases: CVE-2011-1184 |
Authentication Bypass in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … | There are no reported fixed by versions. |
|
GHSA-xh5x-j8jf-pcpx
Aliases: CVE-2014-0099 |
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, … |
Vulnerable |
|
GHSA-h6c8-rg87-f3pc
Aliases: CVE-2011-1475 |
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users The HTTP BIO connector in Apache … | There are no reported fixed by versions. |
|
GHSA-76vr-72mv-mf3q
Aliases: CVE-2012-4431 |
Cross-Site Request Forgery in Apache Tomcat org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers … | There are no reported fixed by versions. |
|
GHSA-6cr4-7c7p-p3xv
Aliases: CVE-2011-5064 |
Use of Hard-coded Cryptographic Key in Apache Tomcat DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … | There are no reported fixed by versions. |
|
GHSA-cxg2-49rq-8gcr
Aliases: CVE-2010-2227 |
Apache Tomcat does not properly handle an invalid Transfer-Encoding header Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 … | There are no reported fixed by versions. |
|
GHSA-475f-74wp-pqv5
Aliases: CVE-2014-0075 |
Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, … |
Vulnerable |
|
GHSA-qprx-q2r7-3rx6
Aliases: CVE-2014-0096 |
Improper Input Validation in Apache Tomcat java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and … |
Vulnerable |
|
GHSA-4f7h-9j2x-cmr4
Aliases: CVE-2011-5062 |
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … | There are no reported fixed by versions. |
|
GHSA-8h2q-qm9x-55jc
Aliases: CVE-2012-0022 |
Denial of Service in Apache Tomcat Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an … | There are no reported fixed by versions. |
|
GHSA-4c43-cwvx-9crh
Aliases: CVE-2014-7810 |
Improper Access Control in Apache Tomcat The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, … | There are no reported fixed by versions. |
|
GHSA-pxcx-cxq8-4mmw
Aliases: CVE-2014-0230 |
Uncontrolled Resource Consumption in Apache Tomcat Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not … |
Vulnerable |
|
CVE-2019-12418
|
Insufficiently Protected Credentials When Apache Tomcat is configured with the JMX Remote Lifecycle Listener, a local attacker without access to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-1938
|
Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-0232
|
Improper Input Validation When running on Windows with `enableCmdLineArguments` enabled, the CGI Servlet in Apache Tomcat is vulnerable to Remote … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-17563
|
Session Fixation When using `FORM` authentication with Apache Tomcat there is a narrow window where an attacker could perform a … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2012-5886
Aliases: GHSA-9xrj-439h-62hg |
Improper Authentication The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before … | There are no reported fixed by versions. |
|
CVE-2021-30640
|
Improper Authentication A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat, the HTTP header parsing code used an approach to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2017-5648
Aliases: GHSA-3vx3-xf6q-r5xp |
Exposure of Resource to Wrong Sphere While investigating bug 60718, it was noticed that some calls to application listeners in … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-mv42-px54-87jw
Aliases: CVE-2016-0714 |
Improper Access Control in Apache Tomcat The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before … |
Vulnerable Vulnerable |
|
GHSA-rh8q-vjgf-gf74
Aliases: CVE-2015-5345 |
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat The Mapper component in Apache Tomcat 6.x before … |
Vulnerable Vulnerable |
|
GHSA-jjpq-gp5q-8q6w
Aliases: CVE-2019-0221 |
Cross-site scripting in Apache Tomcat The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 … |
Vulnerable Vulnerable |
|
CVE-2010-3718
Aliases: GHSA-fj6c-prgj-gr3r |
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, … | There are no reported fixed by versions. |
|
CVE-2018-1304
|
Improper Access Control Unauthorised users could gain access to web application resources. Only security constraints with a URL pattern of … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2026-24880
Aliases: GHSA-563x-q5rq-57qp |
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1305
|
Improper Access Control A vulnerability in Tomcat leads to the exposure of resources to users that are not authorised to … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-8735
Aliases: GHSA-cw54-59pw-4g8c |
Improper Access Control Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-5647
Aliases: GHSA-3gv7-3h64-78cm |
Exposure of Sensitive Information to an Unauthorized Actor A bug in the handling of the pipelined requests in Apache Tomcat … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2016-6816
Aliases: GHSA-jc7p-5r39-9477 |
Improper Input Validation The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-gcx9-497g-6cp6
Aliases: CVE-2026-65182 |
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads … | There are no reported fixed by versions. |
|
GHSA-h3x4-894j-xpx5
Aliases: CVE-2026-68525 |
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows … | There are no reported fixed by versions. |
|
GHSA-xx68-jfcg-xmmf
Aliases: CVE-2014-0050 |
Commons FileUpload Denial of service vulnerability MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, … |
Vulnerable |
|
GHSA-q6x7-f33r-3wxx
Aliases: CVE-2016-6797 |
Incorrect Authorization in Apache Tomcat The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, … |
Vulnerable Vulnerable |
|
GHSA-jrcp-c39h-r29x
Aliases: CVE-2015-5346 |
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, … | There are no reported fixed by versions. |
|
GHSA-3gv7-3h64-78cm
Aliases: CVE-2017-5647 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat A bug in the handling of the pipelined requests … |
Vulnerable |
|
GHSA-jmvv-524f-hj5j
Aliases: CVE-2017-5664 |
Improper Handling of Exceptional Conditions in Apache Tomcat The error page mechanism of the Java Servlet Specification requires that, when … |
Vulnerable |
|
GHSA-wxcp-f2c8-x6xv
Aliases: CVE-2016-0762 |
Observable Discrepancy in Apache Tomcat The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to … |
Vulnerable Vulnerable |
|
GHSA-3mjp-p938-4329
Aliases: CVE-2016-6796 |
Apache Tomcat vulnerable to SecurityManager bypass A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, … | There are no reported fixed by versions. |
|
GHSA-c38m-v4m2-524v
Aliases: CVE-2011-3190 |
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, … | There are no reported fixed by versions. |
|
GHSA-6qr6-x7jm-x2q6
Aliases: CVE-2015-5174 |
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat Directory traversal vulnerability in RequestUtil.java in Apache Tomcat … |
Vulnerable |
|
GHSA-9hjv-9h75-xmpp
Aliases: CVE-2016-0763 |
Improper Verification of Source of a Communication Channel in Apache Tomcat The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-43v2-6grp-9pp9
Aliases: CVE-2011-0534 |
Apache Tomcat does not enforce the maxHttpHeaderSize limit Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce … | There are no reported fixed by versions. |
|
GHSA-87w9-x2c3-hrjj
Aliases: CVE-2013-4590 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x … |
Vulnerable Vulnerable |
|
GHSA-2rvf-329f-p99g
Aliases: CVE-2016-6794 |
System Property Disclosure in Apache Tomcat When a SecurityManager is configured, a web application's ability to read system properties should … |
Vulnerable Vulnerable |