Approved changes feed: RSS · Atom

cpe:2.3:a:apache:tomcat:6.0.49:*:*:*:*:*:*:*

part: a version: 6.0.49 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductTomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/tomcat purl2cpe 2026-06-01 10:14:27.124478
pkg:github/apache/tomcat purl2cpe 2026-06-01 10:14:27.124480
pkg:maven/org.apache.tomcat/tomcat purl2cpe 2026-06-01 10:14:27.124481
pkg:rpm/fedora/tomcat purl2cpe 2026-06-01 10:14:27.124482
pkg:rpm/opensuse/tomcat purl2cpe 2026-06-01 10:14:27.124484

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5647 vulnerable 2026-06-08 05:09:47.629912 Details available
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
Published: 2017-04-17T16:00:00.000Z
Updated: 2024-08-05T15:11:48.364Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.