Skip to content
OpenAdvisories

Package · Maven

org.apache.tomcat:tomcat

168 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • High —
    CVE-2006-7197

    Apache Tomcat Buffer Over-Read

    The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2005-3510

    Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests

    Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2002-1394

    Apache Tomcat Source Code Disclosure

    Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2002-0493

    Apache Tomcat may be started without proper security settings

    Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

    org.apache.tomcat:tomcat Maven