Skip to content
OpenAdvisories
Unscored DSA-1468-1 2 CVEs

tomcat5.5

Published Jan 20, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 tomcat5.5 5.5.20-2etch2

Vulnerabilities 2

  • Low —
    CVE-2007-2450

    Apache Tomcat vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenti…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-0128 Public exploit EPSS 20%

    The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the…