tomcat5.5 vulnerabilities (Debian)

17 vulnerabilities.

• tomcat5.5 Debian Apache Tomcat does not properly handle an invalid Transfer-Encoding header CVE-2010-2227 Fix available EPSS 54.8% 6.4 MediumJuly 13, 2010
• tomcat5.5 Debian Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2010-1157 Public exploitFix available EPSS 52.5% 2.6 LowApril 23, 2010
• tomcat5.5 Debian Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat CVE-2009-2902 Fix available EPSS 10.7% 4.3 MediumJanuary 28, 2010
• tomcat5.5 Debian Apache Tomcat Directory Traversal vulnerability CVE-2009-2693 Fix available 5.8 MediumJanuary 28, 2010
• tomcat5.5 Debian Directory Traversal in Apache Tomcat CVE-2008-5515 Fix available EPSS 18.7% 5.0 MediumJune 16, 2009
• tomcat5.5 Debian Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2009-0783 Fix available 4.2 MediumJune 5, 2009
• tomcat5.5 Debian Exposure of Sensitive Information in Apache Tomcat CVE-2009-0580 Public exploitFix available EPSS 94.4% 4.3 MediumJune 5, 2009
• tomcat5.5 Debian Apache Tomcat Denial of Service via Malformed Request Headers CVE-2009-0033 EPSS 10.1% 5.0 MediumJune 5, 2009
• tomcat5.5 Debian Cross-site scripting in Apache Tomcat CVE-2009-0781 Fix available 4.3 MediumMarch 9, 2009
• tomcat5.5 Debian Apache Tomcat Cross-site scripting (XSS) vulnerability CVE-2008-1947 Fix available 4.3 MediumJune 4, 2008
• tomcat5.5 Debian The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5... CVE-2008-0128 Public exploit EPSS 19.6% 5.0 MediumJanuary 20, 2008
• tomcat5.5 Debian JULI logging component in Apache Tomcat does not restrict certain permissions for web applications CVE-2007-5342 6.4 MediumDecember 27, 2007
• tomcat5.5 Debian Apache Tomcat Path Traversal Vulnerability CVE-2007-5461 Public exploit EPSS 39.7% 3.5 LowOctober 15, 2007
• tomcat5.5 Debian Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6... CVE-2007-3386 Public exploit EPSS 59.0% 4.3 MediumAugust 14, 2007
• tomcat5.5 Debian Apache Tomcat Mishandles Character Sequence in Cookies CVE-2007-3385 EPSS 16.9% 4.3 MediumAugust 14, 2007
• tomcat5.5 Debian Apache Tomcat treats single quotes as delimiters in cookies CVE-2007-3382 Public exploit EPSS 37.5% 4.3 MediumAugust 14, 2007
• tomcat5.5 Debian Apache Tomcat vulnerable to Cross-site Scripting CVE-2007-2450 Fix available 3.5 LowJune 14, 2007