tomcat8

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the tomcat8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Time-of-check Time-of-use (TOCTOU)	<8.0.32-1ubuntu1.13+esm1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<8.0.32-1ubuntu1.13
L Deserialization of Untrusted Data	<8.0.32-1ubuntu1.13
L HTTP Request Smuggling	<8.0.32-1ubuntu1.13
M Insufficiently Protected Credentials	<8.0.32-1ubuntu1.11
L Session Fixation	<8.0.32-1ubuntu1.11
L Cross-site Scripting (XSS)	<8.0.32-1ubuntu1.10
M Open Redirect	<8.0.32-1ubuntu1.8
M Loop with Unreachable Exit Condition ('Infinite Loop')	<8.0.32-1ubuntu1.7
L Improper Certificate Validation	<8.0.32-1ubuntu1.7
L Insecure Default Initialization of Resource	<8.0.32-1ubuntu1.6
M CVE-2018-1304	<8.0.32-1ubuntu1.6
M CVE-2018-1305	<8.0.32-1ubuntu1.6
H Unrestricted Upload of File with Dangerous Type	<8.0.32-1ubuntu1.6
M Insufficient Verification of Data Authenticity	<8.0.32-1ubuntu1.5
L Security Features	<8.0.32-1ubuntu1.3
M Error Handling	<8.0.32-1ubuntu1.3
L Improper Access Control	<8.0.32-1ubuntu1.3
L Access Restriction Bypass	<8.0.32-1ubuntu1.3
L Information Exposure	<8.0.32-1ubuntu1.3
M Security Features	<8.0.32-1ubuntu1.3
M Improper Handling of Exceptional Conditions	<8.0.32-1ubuntu1.5
M Information Exposure	<8.0.32-1ubuntu1.5
M Exposure of Resource to Wrong Sphere	<8.0.32-1ubuntu1.5
H Improper Access Control	<8.0.32-1ubuntu1.3
M Link Following	<8.0.32-1ubuntu1.3
M Access Restriction Bypass	<8.0.32-1ubuntu1.3
M Improper Input Validation	<8.0.32-1ubuntu1.3
M Improper Input Validation	<8.0.32-1ubuntu1.2
L Improper Access Control	<8.0.32-1ubuntu1.3
M Improper Input Validation	<8.0.32-1ubuntu1.1