org.apache.tomcat.embed:tomcat-embed-core

82 results · Feed

• Medium —
  CVE-2014-0095

  Denial of service in Apache Tomcat

  java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial of service (thread consumption) by using a "Content-Length: 0" AJP request to trigger a hang in request processing.

  org.apache.tomcat.embed:tomcat-embed-core org.apache.tomcat:tomcat-coyote Maven
  May 31, 2014
• Medium —
  CVE-2008-1947

  Apache Tomcat Cross-site scripting (XSS) vulnerability

  Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.

  org.apache.tomcat:tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
  Jun 4, 2008