Apache Software Foundation Tomcat 5.5.28
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:5.5.28:*:*:*:*:*:*:*
part: a version: 5.5.28 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.060408 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.060409 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:27.060410 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:27.060412 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:27.060413 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4590 |
vulnerable | 2026-06-08 05:04:48.565598 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:45:15.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4322 |
vulnerable | 2026-06-08 05:04:35.494499 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:38:01.901Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4286 |
vulnerable | 2026-06-08 05:04:35.201518 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:38:01.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5887 |
vulnerable | 2026-06-08 05:02:58.576965 |
Details available
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
Published: 2012-11-17T19:00:00.000Z
Updated: 2024-08-06T21:21:27.681Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5886 |
vulnerable | 2026-06-08 05:02:58.574292 |
Details available
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID.
Published: 2012-11-17T19:00:00.000Z
Updated: 2024-08-06T21:21:27.875Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5885 |
vulnerable | 2026-06-08 05:02:58.559236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0022 |
vulnerable | 2026-06-08 04:59:35.587823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5064 |
vulnerable | 2026-06-08 04:59:34.397804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5063 |
vulnerable | 2026-06-08 04:59:34.395487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5062 |
vulnerable | 2026-06-08 04:59:34.389282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3190 |
vulnerable | 2026-06-08 04:58:10.988978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2526 |
vulnerable | 2026-06-08 04:58:07.431780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2204 |
vulnerable | 2026-06-08 04:58:04.801684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1184 |
vulnerable | 2026-06-08 04:57:56.787312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0013 |
vulnerable | 2026-06-08 04:56:33.191106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3718 |
vulnerable | 2026-06-08 04:55:16.612835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2227 |
vulnerable | 2026-06-08 04:54:12.288635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1157 |
vulnerable | 2026-06-08 04:54:05.567167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3548 |
vulnerable | 2026-06-08 04:51:42.554998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2902 |
vulnerable | 2026-06-08 04:51:31.253503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2901 |
vulnerable | 2026-06-08 04:51:31.251188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2693 |
vulnerable | 2026-06-08 04:51:30.033697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.