org.apache.tomcat:tomcat
Maven160 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.apache.tomcat:tomcatpage 2 of 4
- CVE-2009-2693NONECVSS 0.0EG 0.0✓ Fixed in 6.0.242010-01-28
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/ca…
- CVE-2009-2901NONECVSS 0.0EG 0.0✓ Fixed in 6.0.242010-01-28
The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended authenti…
- CVE-2009-2902NONECVSS 0.0EG 0.0✓ Fixed in 6.0.242010-01-28
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war file…
- CVE-2009-3555CRITICALCVSS 9.8EG 9.8✓ Fixed in 5.5.332009-11-09
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla N…
- CVE-2010-1157NONECVSS 0.0EG 0.0✓ Fixed in 6.0.282010-04-23
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then rea…
- CVE-2010-2227NONECVSS 0.0EG 0.0✓ Fixed in 6.0.282010-07-13
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain sensitive info…
- CVE-2010-3718NONECVSS 0.0EG 0.0✓ Fixed in 5.5.302011-02-10
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working di…
- CVE-2010-4172NONECVSS 0.0EG 0.02010-11-26
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort par…
- CVE-2010-4312NONECVSS 0.0EG 0.0✓ Fixed in 6.0.352010-11-26
The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
- CVE-2010-4476NONECVSS 0.0EG 0.0✓ Fixed in 5.5.332011-02-17
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products,…
- CVE-2011-0013NONECVSS 0.0EG 0.0✓ Fixed in 7.0.62011-02-19
Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated vi…
- CVE-2011-0534NONECVSS 0.0EG 0.0✓ Fixed in 7.0.82011-02-10
Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service (OutOfMemoryError) via a craf…
- CVE-2011-1088NONECVSS 0.0EG 0.0✓ Fixed in 7.0.102011-03-14
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
- CVE-2011-1183NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122011-04-08
vulnerable: 7.0.11
Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: thi…
- CVE-2011-1184NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122012-01-14
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not have the expected countermeasures against replay attacks, which makes it easier for remote attacke…
- CVE-2011-1419NONECVSS 0.0EG 0.0✓ Fixed in 7.0.112011-03-14
Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: thi…
- CVE-2011-1475NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122011-04-08
The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application da…
- CVE-2011-1582NONECVSS 0.0EG 0.0✓ Fixed in 7.0.142011-05-20
Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP re…
- CVE-2011-2204NONECVSS 0.0EG 0.0✓ Fixed in 7.0.192011-06-29
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain se…
- CVE-2011-2481NONECVSS 0.0EG 0.0✓ Fixed in 7.0.172011-08-15
Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web application…
- CVE-2011-2526NONECVSS 0.0EG 0.0✓ Fixed in 7.0.192011-07-14
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file ac…
- CVE-2011-3190NONECVSS 0.0EG 0.0✓ Fixed in 5.5.342011-08-31
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain s…
- CVE-2011-3375NONECVSS 0.0EG 0.0✓ Fixed in 7.0.222012-01-19
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP h…
- CVE-2011-4858NONECVSS 0.0EG 0.0✓ Fixed in 7.0.232012-01-05
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of servi…
- CVE-2011-5062NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122012-01-14
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requi…
- CVE-2011-5063NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122012-01-14
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by l…
- CVE-2011-5064NONECVSS 0.0EG 0.0✓ Fixed in 7.0.122012-01-14
DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it…
- CVE-2012-0022NONECVSS 0.0EG 0.0✓ Fixed in 7.0.232012-01-19
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many…
- CVE-2012-3544NONECVSS 0.0EG 0.0✓ Fixed in 7.0.302013-06-01
Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
- CVE-2012-3546NONECVSS 0.0EG 0.0✓ Fixed in 7.0.302012-12-19
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal cal…
- CVE-2012-4431NONECVSS 0.0EG 0.0✓ Fixed in 7.0.322012-12-19
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session …
- CVE-2012-5885NONECVSS 0.0EG 0.0✓ Fixed in 7.0.302012-11-17
The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka se…
- CVE-2013-2067NONECVSS 0.0EG 0.0✓ Fixed in 7.0.332013-06-01
java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and 7.x before 7.0.33 does not properly handle the relationships between authentication requirements an…
- CVE-2013-2071NONECVSS 0.0EG 0.0✓ Fixed in 7.0.402013-06-01
vulnerable: 7.0.35, 7.0.37, 7.0.39
java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeException in an AsyncListener in an application, which allows context-dependent attackers to obtain se…
- CVE-2013-2185NONECVSS 0.0EG 0.0✓ Fixed in 7.0.392014-01-19
vulnerable: 7.0.35, 7.0.37
The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL b…
- CVE-2013-4286NONECVSS 0.0EG 0.0✓ Fixed in 8.0.0-RC32014-02-26
vulnerable: 8.0.0-RC1
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorre…
- CVE-2013-4322NONECVSS 0.0EG 0.0✓ Fixed in 8.0.0-RC102014-02-26
vulnerable: 8.0.0-RC1, 8.0.0-RC3, 8.0.0-RC5
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a tr…
- CVE-2013-4444NONECVSS 0.0EG 0.0✓ Fixed in 7.0.402014-09-12
vulnerable: 7.0.35, 7.0.37, 7.0.39
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and access…
- CVE-2013-4590NONECVSS 0.0EG 0.0✓ Fixed in 8.0.0-RC102014-02-26
vulnerable: 8.0.0-RC1, 8.0.0-RC3, 8.0.0-RC5
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or …
- CVE-2014-0033NONECVSS 0.0EG 0.0✓ Fixed in 6.0.382014-02-26
org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote attackers to conduct session fixation attack…
- CVE-2014-0050NONECVSS 0.0EG 9.0✓ Fixed in 7.0.522014-04-01
vulnerable: 7.0.35 ... 7.0.50 (8 versions)
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type he…
- CVE-2014-0075NONECVSS 0.0EG 0.0✓ Fixed in 8.0.42014-05-31
vulnerable: 8.0.1, 8.0.3
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service…
- CVE-2014-0096NONECVSS 0.0EG 0.0✓ Fixed in 8.0.62014-05-31
vulnerable: 8.0.1, 8.0.3, 8.0.5
java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass secur…
- CVE-2014-0099NONECVSS 0.0EG 0.0✓ Fixed in 8.0.62014-05-31
vulnerable: 8.0.1, 8.0.3, 8.0.5
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks…
- CVE-2014-0119NONECVSS 0.0EG 0.0✓ Fixed in 8.0.62014-05-31
vulnerable: 8.0.1, 8.0.3, 8.0.5
Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a cr…
- CVE-2014-0227NONECVSS 0.0EG 0.0✓ Fixed in 8.0.92015-02-16
vulnerable: 8.0.1, 8.0.3, 8.0.5, 8.0.8
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows …
- CVE-2014-0230NONECVSS 0.0EG 0.0✓ Fixed in 8.0.92015-06-07
vulnerable: 8.0.1, 8.0.3, 8.0.5, 8.0.8
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial o…
- CVE-2014-7810NONECVSS 0.0EG 0.0✓ Fixed in 8.0.162015-06-07
vulnerable: 8.0.1 ... 8.0.9 (9 versions)
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allo…
- CVE-2015-5174MEDIUMCVSS 4.3EG 4.3✓ Fixed in 6.0.452016-02-25
Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent director…
- CVE-2015-5345MEDIUMCVSS 5.3EG 5.3✓ Fixed in 6.0.452016-02-25
The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the …
Check whether org.apache.tomcat:tomcat is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.tomcat:tomcat CVEs against the assets you own.
Start Free Scan →