Apache Software Foundation Tomcat 3.2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*
part: a version: 3.2.3 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:26.994210 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:26.994211 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:26.994212 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:26.994214 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:26.994215 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6357 |
vulnerable | 2026-06-08 05:04:56.034065 |
Details available
Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a /manager/html/undeploy?path= URI. NOTE: the vendor disputes the significance of this report, stating that "the Apache Tomcat Security team has not accepted any reports of CSRF attacks against the Manager application ... as they require a reckless system administrator.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-09-16T17:23:14.148Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4590 |
vulnerable | 2026-06-08 05:04:48.522004 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:45:15.235Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4322 |
vulnerable | 2026-06-08 05:04:35.492996 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:38:01.901Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4286 |
vulnerable | 2026-06-08 05:04:35.145170 |
Details available
Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.
Published: 2014-02-26T11:00:00.000Z
Updated: 2024-08-06T16:38:01.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3548 |
vulnerable | 2026-06-08 04:51:42.498159 |
Details available
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
Published: 2009-11-12T23:00:00.000Z
Updated: 2024-08-07T06:31:10.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0808 |
vulnerable | 2026-06-08 04:48:13.721377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0045 |
vulnerable | 2026-06-08 04:47:20.344448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0044 |
vulnerable | 2026-06-08 04:47:20.340428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0043 |
vulnerable | 2026-06-08 04:47:20.339663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0042 |
vulnerable | 2026-06-08 04:47:20.338946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2007 |
vulnerable | 2026-06-08 04:47:18.859594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2006 |
vulnerable | 2026-06-08 04:47:18.855249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1148 |
vulnerable | 2026-06-08 04:46:23.053323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.