Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.11
purl pkg:maven/org.apache.tomcat/tomcat@7.0.11
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2011-1475

Important: Information disclosure There are no reported fixed by versions.
CVE-2011-1184

Moderate: Multiple weaknesses in HTTP DIGEST authentication There are no reported fixed by versions.
CVE-2011-1183

Important: Security constraint bypass There are no reported fixed by versions.
GHSA-p26v-97vp-jcx6
Aliases:
CVE-2011-1183
Access controll bypass in Apache Tomcat Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2011-1088
Important: Security constraint bypass
GHSA-vch7-92vf-jm44
Apache Tomcat does not follow ServletSecurity annotations Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not … CVE-2011-1419