Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat@9.0.0M1 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-36qh-35cm-5w2w
Aliases: CVE-2021-30640 |
Authentication Bypass by Alternate Name in Apache Tomcat A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker … |
Vulnerable |
|
GHSA-h3ch-5pp2-vh6w
Aliases: CVE-2022-25762 |
Improper socket reuse in Apache Tomcat If a web application sends a WebSocket message concurrently with the WebSocket connection closing … |
Vulnerable |
|
GHSA-wxcp-f2c8-x6xv
Aliases: CVE-2016-0762 |
Observable Discrepancy in Apache Tomcat The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to … |
Vulnerable |
|
GHSA-9hjv-9h75-xmpp
Aliases: CVE-2016-0763 |
Improper Verification of Source of a Communication Channel in Apache Tomcat The `setGlobalContext` method in `org/apache/naming/factory/ResourceLinkFactory.java` in Apache Tomcat 7.x … |
Vulnerable |