Skip to content
OpenAdvisories
Medium DLA-1450-1 2 CVEs

tomcat8 - security update

Published Jul 29, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 tomcat8 8.0.14-1+deb8u12

Vulnerabilities 2

  • Medium 6.5
    CVE-2018-1305 Public exploit EPSS 14%

    Apache Tomcat information exposure vulnerability

    Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to th…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  • Medium 5.9
    CVE-2018-1304 Public exploit EPSS 17%

    Apache Tomcat unauthorized access vulnerability

    The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This …

    Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven