Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.27
purl pkg:maven/org.apache.tomcat/tomcat@7.0.27
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2020-13935

Important: WebSocket DoS
7.0.105
Vulnerable
CVE-2012-2733

Important: Denial of service There are no reported fixed by versions.
CVE-2012-4534

Important: Denial of service There are no reported fixed by versions.
CVE-2020-13935
Aliases:
GHSA-m7jv-hq7h-mq7c
Infinite Loop in Apache Tomcat The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 …
8.5.57
Vulnerable
7.0.105
Vulnerable
9.0.37
Vulnerable
10.0.0-M7
Vulnerable
8.5.57
Vulnerable
7.0.105
Vulnerable
9.0.37
Vulnerable
10.0.0-M7
Vulnerable
8.5.57
Vulnerable
7.0.105
Vulnerable
9.0.37
Vulnerable
10.0.0-M7
Vulnerable
GHSA-m7jv-hq7h-mq7c
Aliases:
CVE-2020-13935
Infinite Loop in Apache Tomcat The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 …
7.0.105
Vulnerable
7.0.105
Vulnerable
This package is not known to fix any advisories.