Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.5
purl pkg:maven/org.apache.tomcat/tomcat@7.0.5
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2015-5346

Low: Session Fixation
7.0.67
Vulnerable
CVE-2011-0013

Low: Cross-site scripting There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2010-4172
Low: Cross-site scripting
GHSA-c78g-qwpw-2jgv
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Multiple cross-site scripting (XSS) vulnerabilities in the Manager application … CVE-2010-4172