Search CVE reports
101 – 110 of 116 results
CVE-2010-3718
Low prioritySome fixes available 3 of 4
Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended...
2 affected packages
tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2010-4312
Low priorityThe default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2010-4172
Medium prioritySome fixes available 3 of 5
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2)...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2010-2227
Medium prioritySome fixes available 6 of 9
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-Encoding header, which allows remote attackers to cause a denial of service (application outage) or obtain...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2010-1157
Negligible priorityApache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2009-2902
Medium prioritySome fixes available 3 of 7
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2009-2901
Medium prioritySome fixes available 3 of 7
The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files that remain from a failed undeploy, which might allow remote attackers to bypass intended...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2009-2693
Medium prioritySome fixes available 3 of 7
Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2008-5515
Medium prioritySome fixes available 2 of 6
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |
CVE-2009-0783
Medium prioritySome fixes available 2 of 6
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2)...
3 affected packages
tomcat5, tomcat5.5, tomcat6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| tomcat5 | — | — | — | — | — |
| tomcat5.5 | — | — | — | — | — |
| tomcat6 | — | — | — | — | — |