Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@9.0.0.M2 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2016-0763
|
Moderate: Security Manager bypass | There are no reported fixed by versions. |
|
GHSA-9hjv-9h75-xmpp
Aliases: CVE-2016-0763 |
Improper Verification of Source of a Communication Channel in Apache Tomcat The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x … |
Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-w7cg-5969-678w
|
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token The (1) Manager and (2) … |
CVE-2015-5351
|
|
GHSA-mv42-px54-87jw
|
Improper Access Control in Apache Tomcat The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before … |
CVE-2016-0714
|
|
GHSA-rh8q-vjgf-gf74
|
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat The Mapper component in Apache Tomcat 6.x before … |
CVE-2015-5345
|
|
CVE-2015-5345
|
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat The Mapper component in Apache Tomcat 6.x before … |
GHSA-rh8q-vjgf-gf74
|
|
GHSA-jrcp-c39h-r29x
|
Improper Neutralization of Input During Web Page Generation in Apache Tomcat Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, … |
CVE-2015-5346
|
|
GHSA-6vx3-hr43-cfrh
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x … |
CVE-2016-0706
|