Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@8.5.7
purl pkg:maven/org.apache.tomcat/tomcat@8.5.7
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2024-21733

Important: Information Disclosure
8.5.64
Vulnerable
CVE-2016-8747

Moderate: Information Disclosure
8.5.11
Vulnerable
CVE-2024-21733
Aliases:
GHSA-f4qf-m5gf-8jm8
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from …
8.5.64
Vulnerable
9.0.44
Vulnerable
GHSA-fjwp-r6fm-q6qw
Aliases:
CVE-2016-8747
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request An information … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2016-8735
Improper Access Control Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x … GHSA-cw54-59pw-4g8c