Skip to content
OpenAdvisories

Package · Ubuntu

tomcat6

86 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

86 results · Feed

  • Medium —
    CVE-2014-7810 EPSS 13%

    Improper Access Control in Apache Tomcat

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  • Medium —
    CVE-2014-0227 EPSS 21%

    Improper Input Validation in Apache Tomcat

    java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to …

    org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  • Medium —
    CVE-2014-0099

    Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat

    Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Conte…

    org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-util Ubuntu Maven
  • Medium —
    CVE-2014-0096

    Improper Input Validation in Apache Tomcat

    java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass security-manager restrict…

    org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-catalina Ubuntu Maven
  • Medium —
    CVE-2014-0075 Public exploit EPSS 18%

    Integer Overflow or Wraparound in Apache Tomcat

    Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumpti…

    org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-coyote Ubuntu Maven
  • Medium —
    CVE-2014-0119

    Missing XML Validation in Apache Tomcat

    Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web applicatio…

    org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-catalina Ubuntu Maven