Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@9.0.28
purl pkg:maven/org.apache.tomcat/tomcat@9.0.28
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.1
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-767j-jfh2-jvrc
Aliases:
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat The refactoring present in Apache Tomcat versions 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 …
9.0.31
Vulnerable
CVE-2019-12418

Insufficiently Protected Credentials When Apache Tomcat is configured with the JMX Remote Lifecycle Listener, a local attacker without access to …
8.5.49
Vulnerable
7.0.99
Vulnerable
9.0.29
Vulnerable
CVE-2019-17569

Low: HTTP Request Smuggling
9.0.31
Vulnerable
CVE-2019-12418

Moderate: Local Privilege Escalation
9.0.29
Vulnerable
This package is not known to fix any advisories.