Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@7.0.30 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9xv2-5v5q-p794
Aliases: CVE-2026-65905 |
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST … | There are no reported fixed by versions. |
|
CVE-2026-65905
Aliases: GHSA-9xv2-5v5q-p794 |
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2012-3544
|
Important: Denial of service | |
|
CVE-2012-3439
|
Moderate: DIGEST authentication weakness | |
|
CVE-2012-3546
|
Important: Bypass of security constraints | |
|
GHSA-99rf-92v6-cwx4
|
Improper Access Control in Apache Tomcat The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x … |
CVE-2012-5885
|
|
GHSA-jgm2-m5cg-f66g
|
Authentication Bypass in Apache Tomcat org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is … |
CVE-2012-3546
|
|
GHSA-qfxv-3ppc-7qg5
|
Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions Apache Tomcat 6.x before 6.0.37 and … |
CVE-2012-3544
|
|
GHSA-28cq-6rmx-pjq4
|
Improper Authentication in Apache Tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, … |
CVE-2012-5887
|
|
CVE-2012-5886
|
Improper Authentication The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before … |
GHSA-9xrj-439h-62hg
|