Apache Tomcat 5.x

Blog

Vulnerability Report: Apache Tomcat 5.x

This vulnerability report for Apache Tomcat 5.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in Apache Tomcat 5.x then you are more than welcome to contact us.

1. Product Summary Only

2. Secunia Advisory Statistics (All time)

2.1. Statistics for 2013

2.2. Statistics for 2012

2.3. Statistics for 2011

2.4. Statistics for 2010

2.5. Statistics for 2009

2.6. Statistics for 2008

2.7. Statistics for 2007

2.8. Statistics for 2006

2.9. Statistics for 2005

2.10. Statistics for 2004

2.11. Statistics for 2003

3. List of Secunia Advisories (All time)

3.1. List for 2013

3.2. List for 2012

3.3. List for 2011

3.4. List for 2010

3.5. List for 2009

3.6. List for 2008

3.7. List for 2007

3.8. List for 2006

3.9. List for 2005

3.10. List for 2004

3.11. List for 2003

4. Send Feedback

Vendor, Links, and Unpatched Vulnerabilities

Vendor	Apache Software Foundation

Product Link	View Here (Link to external site)

Affected By	28 Secunia advisories 51 Vulnerabilities

Monitor Product	Receive alerts for this product

Unpatched	0% (0 of 28 Secunia advisories)

Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..

28 Secunia Advisories in 2003-2013

Secunia has issued a total of 28 Secunia advisories in 2003-2013 for Apache Tomcat 5.x. Currently, 0% (0 out of 28) are marked as unpatched.

More information about the specific Secunia advisories affecting Apache Tomcat 5.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.

Apache Tomcat Security Bypass and Denial of Service Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 1 in 2012. 2,994 views.

Release Date:
2012-11-06

Secunia Advisory ID:
SA51138

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
DoS

Where:
From remote

Short Description:
A weakness and a vulnerability have been reported in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service). [Read More]

Apache Tomcat Web Form Processing Two Denial of Service Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 6 in 2011. 3,630 views.

Release Date:
2011-12-29

Secunia Advisory ID:
SA47411

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
Two vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Apache Tomcat AJP Message Injection Vulnerability
Vendor Patch. Secunia Advisory 2 of 6 in 2011. 4,436 views.

Release Date:
2011-08-30

Secunia Advisory ID:
SA45748

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Exposure of sensitive information

Where:
From remote

Short Description:
A vulnerability has been reported in Apache Tomcat, which can be exploited by malicious people to disclose potentially sensitive information and bypass certain security restrictions. [Read More]

Apache Tomcat Commons Daemon Jsvc Information Disclosure Weakness
Vendor Patch. Secunia Advisory 3 of 6 in 2011. 2,386 views.

Release Date:
2011-08-15

Secunia Advisory ID:
SA45641

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
Local system

Short Description:
A weakness has been reported in Apache Tomcat, which can be exploited by malicious, local users to disclose sensitive information. [Read More]

Apache Tomcat sendfile Security Bypass and Denial of Service
Vendor Patch. Secunia Advisory 4 of 6 in 2011. 4,840 views.

Release Date:
2011-07-14

Secunia Advisory ID:
SA45232

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
DoS

Where:
Local system

Short Description:
A security issue and a vulnerability have been reported in Apache Tomcat, which can be exploited by malicious, local users to bypass certain security restrictions or cause a DoS (Denial of Service). [Read More]

Apache Tomcat Multiple Weaknesses
Vendor Patch. Secunia Advisory 5 of 6 in 2011. 3,889 views.

Release Date:
2011-06-27

Secunia Advisory ID:
SA44981

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Exposure of sensitive information

Where:
Local system

Short Description:
Multiple weaknesses have been reported in Apache Tomcat, which can be exploited by malicious, local users to disclose sensitive information and by malicious people to bypass certain security restrictions. [Read More]

Apache Tomcat Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 6 of 6 in 2011. 4,618 views.

Release Date:
2011-02-07

Secunia Advisory ID:
SA43198

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Cross Site Scripting
DoS

Where:
From remote

Short Description:
Multiple vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service). [Read More]

Apache Tomcat Web Application Manager / Host Manager Cross-Site Request Forgery
Vendor Workaround. Secunia Advisory 1 of 3 in 2010. 7,826 views.

Release Date:
2010-04-26

Secunia Advisory ID:
SA39261

Solution Status:
Vendor Workaround

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been discovered in Apache Tomcat, which can be exploited by malicious people to conduct cross-site request forgery attacks. [Read More]

Apache Tomcat Information Disclosure and Denial of Service
Vendor Patch. Secunia Advisory 2 of 3 in 2010. 6,872 views.

Release Date:
2010-04-23

Secunia Advisory ID:
SA39574

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information
DoS

Where:
From remote

Short Description:
A security issue and a vulnerability have been reported in Apache Tomcat, which can be exploited by malicious people to disclose certain system information and cause a DoS (Denial of Service). [Read More]

Apache Tomcat 5 WAR Deployment Directory Traversal Weaknesses and Security Issue
Vendor Workaround. Secunia Advisory 3 of 3 in 2010. 4,552 views.

Release Date:
2010-01-25

Secunia Advisory ID:
SA38346

Solution Status:
Vendor Workaround

Criticality:

Impact:
Security Bypass
Manipulation of data
Exposure of sensitive information

Where:
From remote

Short Description:
Some weaknesses and a security issue have been reported in Apache Tomcat, which can be exploited by malicious users and malicious people to manipulate certain data, and by malicious people to gain access to potentially sensitive information. [Read More]

Apache Tomcat Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 3 in 2009. 10,236 views.

Release Date:
2009-06-04

Secunia Advisory ID:
SA35326

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of system information
Exposure of sensitive information
DoS

Where:
From remote

Short Description:
Multiple vulnerabilities and a security issue have been reported in Apache Tomcat, which can be exploited by malicious users to disclose sensitive information or manipulate certain data and by malicious people to cause a DoS (Denial of Service) or disclose sensitive information. [Read More]

Apache Tomcat JK Web Server Connector Information Disclosure
Vendor Patch. Secunia Advisory 2 of 3 in 2009. 6,316 views.

Release Date:
2009-04-08

Secunia Advisory ID:
SA34621

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
A vulnerability has been reported in the Apache Tomcat JK Web Server Connector, which can be exploited by malicious people to disclose sensitive information. [Read More]

Apache Tomcat POST Content Disclosure Vulnerability
Vendor Patch. Secunia Advisory 3 of 3 in 2009. 5,600 views.

Release Date:
2009-02-26

Secunia Advisory ID:
SA34057

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
A vulnerability has been reported in Apache Tomcat, which can be exploited by malicious people to potentially disclose sensitive information. [Read More]

Apache Tomcat "RemoteFilterValve" Security Bypass Security Issue
Vendor Patch. Secunia Advisory 1 of 6 in 2008. 6,343 views.

Release Date:
2008-10-13

Secunia Advisory ID:
SA32213

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
A security issue has been reported in Apache Tomcat, which potentially can be exploited by malicious people to bypass certain security restrictions. [Read More]

Apache Tomcat Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 6 in 2008. 12,621 views.

Release Date:
2008-08-04

Secunia Advisory ID:
SA31379

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Cross Site Scripting
Exposure of system information
Exposure of sensitive information

Where:
From remote

Short Description:
Some vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, or disclose sensitive information. [Read More]

Apache Tomcat Host Manager "name" Cross-Site Scripting
Vendor Patch. Secunia Advisory 3 of 6 in 2008. 13,990 views.

Release Date:
2008-06-03

Secunia Advisory ID:
SA30500

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Apache Tomcat Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 6 in 2008. 17,764 views.

Release Date:
2008-02-11

Secunia Advisory ID:
SA28878

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data
Exposure of sensitive information

Where:
From remote

Short Description:
Some vulnerabilities have been reported in Apache Tomcat, which can be exploited by malicious people to manipulate certain data or to disclose sensitive information. [Read More]

Apache Tomcat SingleSignOn Information Disclosure
Vendor Patch. Secunia Advisory 5 of 6 in 2008. 12,440 views.

Release Date:
2008-01-21

Secunia Advisory ID:
SA28552

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
From local network

Short Description:
A security issue has been reported in Apache Tomcat, which can be exploited by malicious people to disclose potentially sensitive information. [Read More]

Apache Tomcat JULI Logging Component Security Bypass
Vendor Patch. Secunia Advisory 6 of 6 in 2008. 14,414 views.

Release Date:
2008-01-02

Secunia Advisory ID:
SA28274

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
Local system

Short Description:
A security issue has been reported in Apache Tomcat, which can be exploited by malicious, local users to bypass certain security restrictions. [Read More]

Apache Tomcat WebDAV Arbitrary File Content Disclosure
Partial Fix. Secunia Advisory 1 of 7 in 2007. 19,069 views.

Release Date:
2007-10-25

Secunia Advisory ID:
SA27398

Solution Status:
Partial Fix

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
eliteb0y has reported a vulnerability in Apache Tomcat, which can be exploited by malicious users to disclose potentially sensitive information. [Read More]

Apache Tomcat Host Manager Servlet "aliases" Cross-Site Scripting
Vendor Patch. Secunia Advisory 2 of 7 in 2007. 14,697 views.

Release Date:
2007-08-15

Secunia Advisory ID:
SA26465

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
NTT OSS CENTER has reported a vulnerability in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Apache Tomcat Cookie Handling Session ID Disclosure
Partial Fix. Secunia Advisory 3 of 7 in 2007. 21,035 views.

Release Date:
2007-08-15

Secunia Advisory ID:
SA26466

Solution Status:
Partial Fix

Criticality:

Impact:
Exposure of sensitive information

Where:
From remote

Short Description:
Tomasz Kuczynski has reported two vulnerabilities in Apache Tomcat, which can be exploited by malicious people to disclose sensitive information. [Read More]

Apache Tomcat Accept-Language Header Cross-Site Scripting
Vendor Patch. Secunia Advisory 4 of 7 in 2007. 15,399 views.

Release Date:
2007-06-19

Secunia Advisory ID:
SA25721

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Apache Tomcat Manager Cross-Site Scripting
Vendor Workaround. Secunia Advisory 5 of 7 in 2007. 16,821 views.

Release Date:
2007-06-15

Secunia Advisory ID:
SA25678

Solution Status:
Vendor Workaround

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Apache Tomcat Directory Traversal Security Issue
Vendor Patch. Secunia Advisory 6 of 7 in 2007. 19,502 views.

Release Date:
2007-04-02

Secunia Advisory ID:
SA24732

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
D. Matscheko has reported a security issue in Apache Tomcat, which can be exploited by malicious people to bypass certain security restrictions. [Read More]

Apache Tomcat JK Web Server Connector Long URL Buffer Overflow
Vendor Patch. Secunia Advisory 7 of 7 in 2007. 46,541 views.

Release Date:
2007-03-05

Secunia Advisory ID:
SA24398

Solution Status:
Vendor Patch

Criticality:

Impact:
System access

Where:
From remote

Short Description:
A vulnerability has been reported in Apache Tomcat JK Web Server Connector, which can be exploited by malicious people to compromise a vulnerable system. [Read More]

Apache Tomcat Directory Listing Denial of Service
Partial Fix. Secunia Advisory 1 of 2 in 2005. 40,634 views.

Release Date:
2005-11-03

Secunia Advisory ID:
SA17416

Solution Status:
Partial Fix

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
David Maciejak has discovered a vulnerability in Apache Tomcat, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Apache Tomcat "Tomcat Manager" Cross-Site Scripting
Vendor Patch. Secunia Advisory 2 of 2 in 2005. 25,095 views.

Release Date:
2005-01-06

Secunia Advisory ID:
SA13737

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
Oliver Karow has discovered some vulnerabilities in Apache Tomcat, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Discuss this Product

A new thread in our forum is automatically created for each Product. Activate the thread by commenting/discussing below.

Subject: Apache Tomcat 5.x

No posts yet

Vulnerability Report: Apache Tomcat 5.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

28 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Vulnerability Report: Apache Tomcat 5.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

28 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?