Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@7.0.12 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2011-1582
|
Important: Security constraint bypass | There are no reported fixed by versions. |
|
GHSA-3xpj-jgv5-q4vv
Aliases: CVE-2011-1582 |
Access restriction bypass in Apache Tomcat Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-1475
|
Important: Information disclosure | |
|
CVE-2011-1184
|
Moderate: Multiple weaknesses in HTTP DIGEST authentication | |
|
CVE-2011-1183
|
Important: Security constraint bypass | |
|
GHSA-hffm-fqv4-w27r
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-5063
|
|
GHSA-q9xf-jwr4-v445
|
Authentication Bypass in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-1184
|
|
GHSA-p26v-97vp-jcx6
|
Access controll bypass in Apache Tomcat Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, … |
CVE-2011-1183
|
|
GHSA-h6c8-rg87-f3pc
|
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users The HTTP BIO connector in Apache … |
CVE-2011-1475
|
|
GHSA-6cr4-7c7p-p3xv
|
Use of Hard-coded Cryptographic Key in Apache Tomcat DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … |
CVE-2011-5064
|
|
GHSA-4f7h-9j2x-cmr4
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, … |
CVE-2011-5062
|