tomcat:catalina

Published: 20 years ago Last updated: 7 months ago Latest version: 4.1.36

License

Known vulnerabilities in the tomcat:catalina package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
C Improper Authentication	[0,)
M Improper Handling of Case Sensitivity	[0,)
M Improper Authorization	[0,)
M Information Exposure	[4.1.0,5.0.16)
M Cross-site Request Forgery (CSRF)	[0,)
H Information Exposure	[4.1.9,)
H Directory Traversal	[5.5.0,)
M Cross-site Scripting (XSS)	[4.1.0,4.1.40)[5.5.0,5.5.28)
H Authentication Bypass	[0,)
H Access Restriction Bypass	[4.0.4,5.5.24)
M Timing Attack	[4,5.5.24)
M Cross-site Scripting (XSS)	[5.5,5.5.32)
M Access Restriction Bypass	[5.5,5.5.34)
M Denial of Service (DoS)	[,5.5.35)
M Improper Authentication	[5.5,5.5.34)
M Improper Input Validation	[5.5,5.5.34)
L Directory Traversal	[5.5.0,5.5.30)
L Information Exposure	[5.5,5.5.29)
L Information Exposure	[5.5,5.5.34)
M Denial of Service (DoS)	[5.5,5.5.35)
M Access Restriction Bypass	[5.5,5.5.36)
M Improper Authentication	[5.5,5.5.36)
M Improper Authentication	[5.5.4,5.5.36)
M Access Restriction Bypass	[,5.5.34)
M Cryptographic Issues	[5.5,5.5.34)

18 VERSIONS IN TOTAL See all versions