Apache Software Foundation Tomcat 10.1.8
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:10.1.8:*:*:*:*:*:*:*
part: a version: 10.1.8 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:26.932637 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:26.932639 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:26.932641 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:26.932642 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:26.932644 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34981 |
vulnerable | 2026-06-08 06:06:26.310912 |
Apache Tomcat: AJP response header mix-up
A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak.
Published: 2023-06-21T10:26:16.916Z
Updated: 2025-02-13T16:55:41.813Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.