Apache Software Foundation Tomcat 8.0.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:tomcat:8.0.0:rc2:*:*:*:*:*:*
part: a version: 8.0.0 update: rc2
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Tomcat (caaa56d3-0cc4-5735-aab9-a3a1a7f4dc56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.125417 |
pkg:github/apache/tomcat |
purl2cpe | 2026-06-01 10:14:27.125418 |
pkg:maven/org.apache.tomcat/tomcat |
purl2cpe | 2026-06-01 10:14:27.125420 |
pkg:rpm/fedora/tomcat |
purl2cpe | 2026-06-01 10:14:27.125421 |
pkg:rpm/opensuse/tomcat |
purl2cpe | 2026-06-01 10:14:27.125422 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-8034 |
vulnerable | 2026-06-08 05:12:05.087599 |
Details available
The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.
Published: 2018-08-01T18:00:00.000Z
Updated: 2024-10-21T16:09:49.791Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1336 |
vulnerable | 2026-06-08 05:11:17.747097 |
Details available
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to 7.0.86.
Published: 2018-08-02T14:00:00.000Z
Updated: 2024-11-14T20:35:47.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3092 |
vulnerable | 2026-06-08 05:07:44.388911 |
Details available
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
Published: 2016-07-04T22:00:00.000Z
Updated: 2024-08-05T23:40:15.604Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7810 |
vulnerable | 2026-06-08 05:05:59.908338 |
Details available
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.
Published: 2015-06-07T23:00:00.000Z
Updated: 2024-08-06T13:03:26.984Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0230 |
vulnerable | 2026-06-08 05:05:12.394268 |
Details available
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
Published: 2015-06-07T23:00:00.000Z
Updated: 2024-08-06T09:05:39.368Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0227 |
vulnerable | 2026-06-08 05:05:12.367914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0119 |
vulnerable | 2026-06-08 05:05:11.600455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0099 |
vulnerable | 2026-06-08 05:05:11.442026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0096 |
vulnerable | 2026-06-08 05:05:11.414546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0095 |
vulnerable | 2026-06-08 05:05:11.411990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0075 |
vulnerable | 2026-06-08 05:05:11.161323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0050 |
vulnerable | 2026-06-08 05:05:10.983029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4590 |
vulnerable | 2026-06-08 05:04:48.513339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4322 |
vulnerable | 2026-06-08 05:04:35.495198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4286 |
vulnerable | 2026-06-08 05:04:35.139030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.