Homepage

org.apache.tomcat:catalina vulnerabilities

Licenses: Apache-2.0
Published: 18 years ago Last updated: 8 years ago Latest version: 6.0.53

License

Apache-2.0[0,);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.apache.tomcat:catalina package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Resource Shutdown or Release

[0,)
  • H
Information Exposure

[6.0.13,6.0.20)
  • M
Cross-site Scripting (XSS)

[,6.0.19)
  • H
Directory Traversal

[6.0.0,6.0.24)
  • H
Information Exposure

[6.0.13,6.0.16)
  • M
Information Exposure

[6.0.0,6.0.20)
  • H
Information Exposure

[6.0.13,6.0.20)
  • L
Frame injection

[6.0.0,6.0.39)
  • H
Authentication Bypass

[,6.0.24)
  • H
Arbitrary Code Execution

[0,)
  • H
Access Restriction Bypass

[6.0.13,6.0.47)
  • M
Timing Attack

[6,6.0.45]
  • M
Directory Traversal

[6,6.0.45)
  • M
Information Exposure

[6,6.0.45)
  • H
Arbitrary Code Execution

[6,6.0.45)
  • M
Directory Traversal

[6,6.0.45)
  • M
Cross-site Scripting (XSS)

[6,6.0.29]
  • M
Access Restriction Bypass

[6.0.0,6.0.33)
  • M
Information Exposure

[6.0.30,6.0.33]
  • M
Denial of Service (DoS)

[6,6.0.35)
  • M
Improper Authentication

[6,6.0.33)
  • M
Improper Input Validation

[6,6.0.33)
  • H
Denial of Service (DoS)

[6,6.0.44)
  • L
Directory Traversal

[6.0.13,6.0.53)
  • L
Information Exposure

[6.0.0,6.0.27)
  • L
Information Exposure

[6,6.0.33)
  • M
Arbitrary File Read

[6,6.0.40)
  • M
Arbitrary File Read

[6,6.0.40)
  • M
Cross-site Request Forgery (CSRF)

[6,6.0.36)
  • M
Denial of Service (DoS)

[6,6.0.34)
  • M
Access Restriction Bypass

[6,6.0.36)
  • M
Access Restriction Bypass

[6,6.0.36)
  • M
Improper Authentication

[6,6.0.36)
  • M
Improper Authentication

[6.0.0,6.0.36)
  • M
Improper Authentication

[6.0.21,6.0.36]
  • M
Information Exposure

[6,6.0.39)
  • M
Improper Input Validation

[6.0.33,6.0.38)
  • M
Cross-site Scripting (XSS)

[6.0.12,6.0.29]
  • M
Access Restriction Bypass

[6,6.0.33)
  • M
Cryptographic Issues

[6,6.0.33)

Package versions

24 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
6.0.532 Apr, 2017
  • 0
    C
  • 1
    H
  • 1
    M
  • 0
    L
6.0.519 Mar, 2017
  • 0
    C
  • 1
    H
  • 1
    M
  • 1
    L
6.0.487 Nov, 2016
  • 0
    C
  • 1
    H
  • 1
    M
  • 1
    L
6.0.4713 Oct, 2016
  • 0
    C
  • 1
    H
  • 1
    M
  • 1
    L
6.0.451 Feb, 2016
  • 0
    C
  • 2
    H
  • 2
    M
  • 1
    L
6.0.448 May, 2015
  • 0
    C
  • 3
    H
  • 5
    M
  • 1
    L
6.0.4314 Nov, 2014
  • 0
    C
  • 4
    H
  • 5
    M
  • 1
    L
6.0.4119 May, 2014
  • 0
    C
  • 4
    H
  • 5
    M
  • 1
    L
6.0.3927 Jan, 2014
  • 0
    C
  • 4
    H
  • 7
    M
  • 1
    L
6.0.3729 Apr, 2013
  • 0
    C
  • 4
    H
  • 9
    M
  • 2
    L