Apache Software Foundation Tomcat 6.0.9 beta
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:6.0.9:beta:*:*:*:*:*:*
part: a version: 6.0.9 update: beta
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.124579 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.124580 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:27.124582 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:27.124583 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:27.124584 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-7810 |
vulnerable | 2026-06-08 05:05:59.857542 |
Details available
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.
Published: 2015-06-07T23:00:00.000Z
Updated: 2024-08-06T13:03:26.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0230 |
vulnerable | 2026-06-08 05:05:12.387781 |
Details available
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
Published: 2015-06-07T23:00:00.000Z
Updated: 2024-08-06T09:05:39.368Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0227 |
vulnerable | 2026-06-08 05:05:12.353480 |
Details available
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.
Published: 2015-02-16T00:00:00.000Z
Updated: 2024-08-06T09:05:39.451Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0119 |
vulnerable | 2026-06-08 05:05:11.602576 |
Details available
Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.
Published: 2014-05-31T10:00:00.000Z
Updated: 2024-08-06T09:05:39.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0099 |
vulnerable | 2026-06-08 05:05:11.441524 |
Details available
Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Published: 2014-05-31T10:00:00.000Z
Updated: 2024-08-06T09:05:38.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0096 |
vulnerable | 2026-06-08 05:05:11.414975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0075 |
vulnerable | 2026-06-08 05:05:11.178532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5887 |
vulnerable | 2026-06-08 05:02:58.577484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5886 |
vulnerable | 2026-06-08 05:02:58.574751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5885 |
vulnerable | 2026-06-08 05:02:58.564317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4534 |
vulnerable | 2026-06-08 05:02:51.282532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4431 |
vulnerable | 2026-06-08 05:02:17.498741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3546 |
vulnerable | 2026-06-08 05:02:10.600710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3544 |
vulnerable | 2026-06-08 05:02:10.589468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2733 |
vulnerable | 2026-06-08 05:02:05.870640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.