tomcat7 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the tomcat7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Deserialization of Untrusted Data	<7.0.52-1ubuntu0.16+esm1
L CVE-2021-25329	<7.0.52-1ubuntu0.16+esm1
L Cross-site Scripting (XSS)	<7.0.52-1ubuntu0.16+esm1
M Open Redirect	<7.0.52-1ubuntu0.16
M Loop with Unreachable Exit Condition ('Infinite Loop')	<7.0.52-1ubuntu0.15
L Improper Certificate Validation	<7.0.52-1ubuntu0.15
L Insecure Default Initialization of Resource	<7.0.52-1ubuntu0.14
M CVE-2018-1304	<7.0.52-1ubuntu0.14
M CVE-2018-1305	<7.0.52-1ubuntu0.14
H Unrestricted Upload of File with Dangerous Type	<7.0.52-1ubuntu0.14
M Information Exposure	<7.0.52-1ubuntu0.14
L Security Features	<7.0.52-1ubuntu0.8
M Insufficient Verification of Data Authenticity	<7.0.52-1ubuntu0.13
M Error Handling	<7.0.52-1ubuntu0.8
L Improper Access Control	<7.0.52-1ubuntu0.8
M Security Features	<7.0.52-1ubuntu0.8
L Information Exposure	<7.0.52-1ubuntu0.8
M Improper Handling of Exceptional Conditions	<7.0.52-1ubuntu0.13
M Information Exposure	<7.0.52-1ubuntu0.13
M Exposure of Resource to Wrong Sphere	<7.0.52-1ubuntu0.13
H Improper Access Control	<7.0.52-1ubuntu0.8
M Link Following	<7.0.52-1ubuntu0.8
M Access Restriction Bypass	<7.0.52-1ubuntu0.8
M Improper Input Validation	<7.0.52-1ubuntu0.8
M Loop with Unreachable Exit Condition ('Infinite Loop')	<7.0.52-1ubuntu0.10
M Improper Input Validation	<7.0.52-1ubuntu0.7
L Improper Access Control	<7.0.52-1ubuntu0.8
M Improper Input Validation	<7.0.52-1ubuntu0.6
L CVE-2015-5346	<7.0.52-1ubuntu0.6
L Directory Traversal	<7.0.52-1ubuntu0.6
M Access Restriction Bypass	<7.0.52-1ubuntu0.6
M Access Restriction Bypass	<7.0.52-1ubuntu0.6
L Directory Traversal	<7.0.52-1ubuntu0.6
M Cross-site Request Forgery (CSRF)	<7.0.52-1ubuntu0.6
M Information Exposure	<7.0.52-1ubuntu0.6
L Resource Management Errors	<7.0.52-1ubuntu0.3
M Improper Access Control	<7.0.52-1ubuntu0.3
L Improper Data Handling	<7.0.52-1ubuntu0.3
M Numeric Errors	<7.0.52-1ubuntu0.1
L Access Restriction Bypass	<7.0.52-1ubuntu0.3
M Access Restriction Bypass	<7.0.52-1ubuntu0.1
M Numeric Errors	<7.0.52-1ubuntu0.1

Vulnerability

Vulnerable Version

Deserialization of Untrusted Data

<7.0.52-1ubuntu0.16+esm1