org.apache.tomcat:tomcat vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-5174Mediumorg.apache.tomcat:tomcat: Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2017-5647Highorg.apache.tomcat:tomcat: Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2016-8747Highorg.apache.tomcat:tomcat: Apache Tomcat allows remote attackers to read data that was intended to be associated with a…CVE-2017-15706Mediumorg.apache.tomcat:tomcat: Inconsistent documentation in Apache Tomcat CVE-2017-7674Mediumorg.apache.tomcat:tomcat: Insufficient Verification of Data Authenticity in Apache Tomcat CVE-2017-7675Highorg.apache.tomcat:tomcat: Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2022-25762Highorg.apache.tomcat:tomcat: Improper socket reuse in Apache Tomcat CVE-2017-5664Highorg.apache.tomcat:tomcat: Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5650Highorg.apache.tomcat:tomcat: Improper Resource Shutdown or Release in Apache Tomcat CVE-2013-4444Mediumorg.apache.tomcat:tomcat: Apache Tomcat Unrestricted file upload vulnerability CVE-2016-6794Mediumorg.apache.tomcat:tomcat: System Property Disclosure in Apache Tomcat CVE-2016-6796Highorg.apache.tomcat:tomcat: Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6797Highorg.apache.tomcat:tomcat: Incorrect Authorization in Apache Tomcat CVE-2016-0762Mediumorg.apache.tomcat:tomcat: Observable Discrepancy in Apache Tomcat CVE-2022-29885Highorg.apache.tomcat:tomcat: Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption CVE-2012-0022Mediumorg.apache.tomcat:tomcat: Denial of Service in Apache Tomcat CVE-2011-0013Mediumorg.apache.tomcat:tomcat: Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2010-1157Mediumorg.apache.tomcat:tomcat: Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2009-3555Criticalorg.apache.tomcat:tomcat: Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-2902Mediumorg.apache.tomcat:tomcat: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat CVE-2009-2901Mediumorg.apache.tomcat:tomcat: Improper Authentication in Apache Tomcat CVE-2009-2693Mediumorg.apache.tomcat:tomcat: Apache Tomcat Directory Traversal vulnerability CVE-2009-0783Mediumorg.apache.tomcat:tomcat: Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2009-0781Mediumorg.apache.tomcat:tomcat: Cross-site scripting in Apache Tomcat CVE-2009-0580Mediumorg.apache.tomcat:tomcat: Exposure of Sensitive Information in Apache Tomcat

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo