Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@8.0.0.RC1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2018-8034
|
Low: host name verification missing in WebSocket client |
Vulnerable |
|
CVE-2018-1336
|
Important: A bug in the UTF-8 decoder can lead to DoS |
Vulnerable |
|
CVE-2018-1305
|
Important: Security constraint annotations applied too late |
Vulnerable |
|
CVE-2018-1304
|
Important: Security constraints mapped to context root are ignored |
Vulnerable |
|
CVE-2017-12617
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2017-7674
|
Moderate: Cache Poisoning |
Vulnerable |
|
CVE-2017-5664
|
Important: Security Constraint Bypass |
Vulnerable |
|
CVE-2017-5647
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2017-5648
|
Low: Information Disclosure |
Vulnerable |
|
CVE-2016-8745
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2016-8735
|
Important: Remote Code Execution |
Vulnerable |
|
CVE-2016-6816
|
Important: Information Disclosure |
Vulnerable |
|
CVE-2015-5346
|
Low: Session Fixation |
Vulnerable |
|
CVE-2015-5351
|
Moderate: CSRF token leak |
Vulnerable |
|
CVE-2016-0706
|
Low: Security Manager bypass |
Vulnerable |
|
CVE-2016-0714
|
Moderate: Security Manager bypass |
Vulnerable |
|
CVE-2016-0763
|
Moderate: Security Manager bypass |
Vulnerable |
|
CVE-2015-5345
|
Low: Directory disclosure |
Vulnerable |
|
GHSA-mv42-px54-87jw
Aliases: CVE-2016-0714 |
Improper Access Control in Apache Tomcat The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before … |
Vulnerable Vulnerable |
|
GHSA-73rx-3f9r-x949
Aliases: CVE-2017-7674 |
Insufficient Verification of Data Authenticity in Apache Tomcat The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, … |
Vulnerable |
|
GHSA-jrcp-c39h-r29x
Aliases: CVE-2015-5346 |
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, … | There are no reported fixed by versions. |
|
GHSA-wxcp-f2c8-x6xv
Aliases: CVE-2016-0762 |
Observable Discrepancy in Apache Tomcat The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to … |
Vulnerable |
|
GHSA-3mjp-p938-4329
Aliases: CVE-2016-6796 |
Apache Tomcat vulnerable to SecurityManager bypass A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, … |
Vulnerable |
|
GHSA-6vx3-hr43-cfrh
Aliases: CVE-2016-0706 |
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x … | There are no reported fixed by versions. |