This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Summuary
CPE Namecpe:/a:apache:tomcat:6.0.5
Detail
VendorApacheFirst view 2007-03-16
ProductTomcatLast view2017-08-10
Version6.0.5TypeApplication
Edition 
Language 
Update 
 
CPE Productcpe:/a:apache:tomcat

Activity : Overall

Related : CVE

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
 DateAlertAccess VectorAccess ComplexityAuthentication
52017-08-10CVE-2016-6797NetworkLowNone Requ...
52017-08-10CVE-2016-6796NetworkLowNone Requ...
52017-08-10CVE-2016-6794NetworkLowNone Requ...
52017-08-10CVE-2016-5018NetworkLowNone Requ...
4.32017-08-10CVE-2016-0762NetworkMediumNone Requ...
Hide | Show 20 More...
 DateAlertAccess VectorAccess ComplexityAuthentication
52017-04-17CVE-2017-5647NetworkLowNone Requ...
7.52017-04-06CVE-2016-8735NetworkLowNone Requ...
6.82017-03-20CVE-2016-6816NetworkMediumNone Requ...
5.12016-07-18CVE-2016-5388NetworkHighNone Requ...
52015-06-07CVE-2014-7810NetworkLowNone Requ...
7.82015-06-07CVE-2014-0230NetworkLowNone Requ...
6.42015-02-15CVE-2014-0227NetworkLowNone Requ...
6.82014-09-11CVE-2013-4444NetworkMediumNone Requ...
4.32014-05-31CVE-2014-0119NetworkMediumNone Requ...
4.32014-05-31CVE-2014-0099NetworkMediumNone Requ...
4.32014-05-31CVE-2014-0096NetworkMediumNone Requ...
52014-05-31CVE-2014-0075NetworkLowNone Requ...
4.32014-02-26CVE-2013-4590NetworkMediumNone Requ...
4.32014-02-26CVE-2013-4322NetworkMediumNone Requ...
5.82014-02-26CVE-2013-4286NetworkMediumNone Requ...
7.52014-01-19CVE-2013-2185NetworkLowNone Requ...
52013-06-01CVE-2012-3544NetworkLowNone Requ...
2.62012-12-19CVE-2012-4534NetworkHighNone Requ...
4.32012-12-19CVE-2012-4431NetworkMediumNone Requ...

CWE : Common Weakness Enumeration

%idName
17% (11)CWE-264Permissions, Privileges, and Access Controls
15% (10)CWE-200Information Exposure
12% (8)CWE-20Improper Input Validation
9% (6)CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path ...
7% (5)CWE-79Failure to Preserve Web Page Structure ('Cross-site Scripting')
Hide | Show 11 More...
%idName
6% (4)CWE-399Resource Management Errors
6% (4)CWE-284Access Control (Authorization) Issues
4% (3)CWE-287Improper Authentication
4% (3)CWE-189Numeric Errors
3% (2)CWE-254Security Features
3% (2)CWE-16Configuration
1% (1)CWE-310Cryptographic Issues
1% (1)CWE-255Credentials Management
1% (1)CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer
1% (1)CWE-94Failure to Control Generation of Code ('Code Injection')
1% (1)CWE-19Data Handling

Oval Markup Language : Definitions

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
OvalIDName
oval:org.mitre.oval:def:26507Allows remote attackers to cause a denial of service by streaming data.
oval:org.mitre.oval:def:26443SUSE-SU-2014:1015-1 -- Security update for tomcat6
oval:org.mitre.oval:def:26649DEPRECATED: SUSE-SU-2014:1015-1 -- Security update for tomcat6
oval:org.mitre.oval:def:26472DEPRECATED: ELSA-2014-0429 -- tomcat6 security update (Moderate)
oval:org.mitre.oval:def:10417The default catalina.policy in the JULI logging component in Apache Tomcat 5....
Hide | Show 20 More...
idName
oval:org.mitre.oval:def:21709ELSA-2008:0042: tomcat security update (Moderate)
oval:org.mitre.oval:def:6111HP-UX running Apache, Remote Arbitrary Code Execution, Cross Site Scripting (...
oval:org.mitre.oval:def:29131HP-UX Apache Tomcat v7.x, Remote Denial of Service (DoS) and Other Vulnerabil...
oval:org.mitre.oval:def:29086HP-UX Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Ser...
oval:org.mitre.oval:def:21075RHSA-2013:0623: tomcat6 security update (Important)
oval:org.mitre.oval:def:20966RHSA-2013:0640: tomcat5 security update (Important)
oval:org.mitre.oval:def:18605DSA-2725-1 tomcat6 - several
oval:org.mitre.oval:def:17934USN-1637-1 -- tomcat6 vulnerabilities
oval:org.mitre.oval:def:24031ELSA-2013:0623: tomcat6 security update (Important)
oval:org.mitre.oval:def:23491ELSA-2013:0640: tomcat5 security update (Important)
oval:org.mitre.oval:def:5739HP-UX Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Unauthor...
oval:org.mitre.oval:def:19110HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), ...
oval:org.mitre.oval:def:10231Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6...
oval:org.mitre.oval:def:11177Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4...
oval:org.mitre.oval:def:21412RHSA-2012:0474: tomcat5 security update (Moderate)
oval:org.mitre.oval:def:21312RHSA-2012:0475: tomcat6 security update (Moderate)
oval:org.mitre.oval:def:20494VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client,...
oval:org.mitre.oval:def:18934HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), ...
oval:org.mitre.oval:def:16925Vulnerability in the Management Pack for Oracle GoldenGate Server. Supported ...
oval:org.mitre.oval:def:15309DSA-2401-1 tomcat6 -- several

SAINT Exploits

DescriptionLink
HP Performance Manager Apache Tomcat Policy BypassMore info here

Open Source Vulnerability Database (OSVDB)

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
idDescription
78573Apache Tomcat CPU Consumption Parameter Saturation Remote DoS
78483Hitachi Cosminexus Multiple Product Hash Collission Form Parameter Parsing Re...
78113Apache Tomcat Hash Collission Form Parameter Parsing Remote DoS
76189Apache Tomcat HTTP DIGEST Authentication Weakness
74818Apache Tomcat AJP Message Injection Authentication Bypass
Hide | Show 20 More...
idDescription
73798Apache Tomcat sendfile Request Start / Endpoint Parsing Local DoS
73797Apache Tomcat sendfile Request Attribute Validation Weakness Local Access Res...
73429Apache Tomcat JMX MemoryUserDatabase Local Password Disclosure
71558Apache Tomcat SecurityManager ServletContext Attribute Traversal Arbitrary Fi...
71557Apache Tomcat HTML Manager Multiple XSS
70809Apache Tomcat NIO HTTP Connector Request Line Processing DoS
69512Apache Tomcat Set-Cookie Header HTTPOnly Flag Session Hijacking Weakness
66319Apache Tomcat Crafted Transfer-Encoding Header Handling Buffer Recycling Remo...
64023Apache Tomcat WWW-Authenticate Header Local Host Information Disclosure
62511CA Service Desk Tomcat host-manager/html/add name Parameter XSS
62054Apache Tomcat WAR Filename Traversal Work-directory File Deletion
62053Apache Tomcat Autodeployment Process appBase File HTTP Request Authentication...
62052Apache Tomcat WAR File Traversal Arbitrary File Overwrite
60176Apache Tomcat Windows Installer Admin Default Password
55056Apache Tomcat Cross-application TLD File Manipulation
55055Apache Tomcat Illegally URL Encoded Password Request Username Enumeration
55054Apache Tomcat Java AJP Connector mod_jk Load Balancing Worker Malformed Heade...
55053Apache Tomcat Crafted Request Security Restraint Bypass Arbitrary Content Access
52899Apache Tomcat Examples Web Application Calendar Application jsp/cal/cal2.jsp ...
47464Apache Tomcat allowLinking / UTF-8 Traversal Arbitrary File Access

ExploitDB Exploits

idDescription
31130Apache Tomcat <= 6.0.15 Cookie Quote Handling Remote Information Disclosur...
18305PHP Hash Table Collision Proof Of Concept
12343Apache Tomcat v. 5.5.0 to 5.5.29 & 6.0.0 to 6.0.26 information disclosure...
10085ToutVirtual VirtualIQ Pro 3.2 Multiple Vulnerabilities
6229Apache Tomcat < 6.0.18 UTF8 Directory Traversal Vulnerability

OpenVAS Exploits

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
idDescription
2012-12-26Name : Fedora Update for tomcat FEDORA-2012-20151
File : nvt/gb_fedora_2012_20151_tomcat_fc16.nasl
2012-12-05Name : Apache Tomcat Partial HTTP Requests DoS Vulnerability (Windows)
File : nvt/gb_apache_tomcat_partial_http_req_dos_vuln_win.nasl
2012-11-27Name : Apache Tomcat HTTP NIO Denial Of Service Vulnerability (Windows)
File : nvt/gb_apache_tomcat_http_nio_connector_dos_vuln_win.nasl
2012-11-27Name : Apache Tomcat Multiple Security Bypass Vulnerabilities (Windows)
File : nvt/gb_apache_tomcat_mult_sec_bypass_vuln_win.nasl
2012-11-26Name : FreeBSD Ports: tomcat
File : nvt/freebsd_tomcat2.nasl
Hide | Show 20 More...
idDescription
2012-11-23Name : Ubuntu Update for tomcat6 USN-1637-1
File : nvt/gb_ubuntu_USN_1637_1.nasl
2012-08-14Name : Fedora Update for tomcat6 FEDORA-2012-7593
File : nvt/gb_fedora_2012_7593_tomcat6_fc16.nasl
2012-08-10Name : Gentoo Security Advisory GLSA 201206-24 (apache tomcat)
File : nvt/glsa_201206_24.nasl
2012-08-03Name : Mandriva Update for tomcat5 MDVSA-2012:085 (tomcat5)
File : nvt/gb_mandriva_MDVSA_2012_085.nasl
2012-08-02Name : SuSE Update for tomcat6 openSUSE-SU-2012:0208-1 (tomcat6)
File : nvt/gb_suse_2012_0208_1.nasl
2012-07-30Name : CentOS Update for tomcat6 CESA-2011:1780 centos6
File : nvt/gb_CESA-2011_1780_tomcat6_centos6.nasl
2012-07-30Name : CentOS Update for tomcat5 CESA-2011:1845 centos5 x86_64
File : nvt/gb_CESA-2011_1845_tomcat5_centos5_x86_64.nasl
2012-07-30Name : CentOS Update for tomcat5 CESA-2012:0474 centos5
File : nvt/gb_CESA-2012_0474_tomcat5_centos5.nasl
2012-07-30Name : CentOS Update for tomcat6 CESA-2012:0475 centos6
File : nvt/gb_CESA-2012_0475_tomcat6_centos6.nasl
2012-07-09Name : RedHat Update for tomcat6 RHSA-2011:1780-01
File : nvt/gb_RHSA-2011_1780-01_tomcat6.nasl
2012-07-09Name : RedHat Update for tomcat6 RHSA-2012:0475-01
File : nvt/gb_RHSA-2012_0475-01_tomcat6.nasl
2012-06-06Name : RedHat Update for tomcat6 RHSA-2011:0335-01
File : nvt/gb_RHSA-2011_0335-01_tomcat6.nasl
2012-06-06Name : RedHat Update for tomcat6 RHSA-2011:0791-01
File : nvt/gb_RHSA-2011_0791-01_tomcat6.nasl
2012-04-13Name : RedHat Update for tomcat5 RHSA-2012:0474-01
File : nvt/gb_RHSA-2012_0474-01_tomcat5.nasl
2012-04-02Name : Fedora Update for tomcat6 FEDORA-2011-13426
File : nvt/gb_fedora_2011_13426_tomcat6_fc16.nasl
2012-03-16Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe...
File : nvt/gb_VMSA-2011-0003.nasl
2012-03-16Name : VMSA-2012-0005 VMware vCenter Server, Orchestrator, Update Manager, vShield, ...
File : nvt/gb_VMSA-2012-0005.nasl
2012-02-21Name : Ubuntu Update for tomcat6 USN-1359-1
File : nvt/gb_ubuntu_USN_1359_1.nasl
2012-02-12Name : FreeBSD Ports: tomcat
File : nvt/freebsd_tomcat0.nasl
2012-02-12Name : Debian Security Advisory DSA 2401-1 (tomcat6)
File : nvt/deb_2401_1.nasl

Information Assurance Vulnerability Management (IAVM)

idDescription
2015-A-0160Multiple Vulnerabilities in Oracle Linux and Virtualization
Severity : Category I - VMSKEY : V0061123
2015-B-0083Multiple Vulnerabilities in IBM Storwize V7000 Unified
Severity : Category I - VMSKEY : V0060983
2015-B-0065Apache Tomcat Security Bypass Vulnerability
Severity : Category I - VMSKEY : V0060761
2014-B-0063Multiple Vulnerabilities in Apache Tomcat
Severity : Category I - VMSKEY : V0051613
2014-B-0019Multiple Vulnerabilities in Apache Tomcat
Severity : Category I - VMSKEY : V0044527
Hide | Show 6 More...
idDescription
2014-A-0009Multiple Vulnerabilities in Oracle Fusion Middleware
Severity : Category I - VMSKEY : V0043395
2013-A-0219Multiple Vulnerabilities in Juniper Networks and Security Manager
Severity : Category I - VMSKEY : V0042384
2013-A-0177Multiple Vulnerabilities in Red Hat JBoss Enterprise Application Platform
Severity : Category I - VMSKEY : V0040288
2013-B-0047Multiple Vulnerabilities in Apache Tomcat
Severity : Category I - VMSKEY : V0037947
2012-B-0048Multiple Vulnerabilities in HP Systems Insight Manager
Severity : Category I - VMSKEY : V0032178
2011-A-0066Multiple Vulnerabilities in VMware Products
Severity : Category I - VMSKEY : V0027158

Snort® IPS/IDS

DateDescription
2018-04-27Apache Tomcat Java JmxRemoteLifecycleListener unauthorized serialized object ...
RuleID : 46071 - Type : SERVER-APACHE - Revision : 1
2016-07-28HttpOxy CGI application vulnerability potential man-in-the-middle attempt
RuleID : 39737-community - Type : SERVER-WEBAPP - Revision : 2
2016-08-31HttpOxy CGI application vulnerability potential man-in-the-middle attempt
RuleID : 39737 - Type : SERVER-WEBAPP - Revision : 2
2014-11-16http POST request smuggling attempt
RuleID : 31213 - Type : INDICATOR-COMPROMISE - Revision : 2
2014-11-16http GET request smuggling attempt
RuleID : 31212 - Type : INDICATOR-COMPROMISE - Revision : 2
Hide | Show 18 More...
DateDescription
2014-01-10PyLoris http DoS tool
RuleID : 28532 - Type : MALWARE-TOOLS - Revision : 3
2014-01-10JBoss JMXInvokerServlet access attempt
RuleID : 24343 - Type : SERVER-WEBAPP - Revision : 4
2014-01-10JBoss web console access attempt
RuleID : 24342 - Type : SERVER-WEBAPP - Revision : 4
2014-01-10JBoss admin-console access
RuleID : 21517 - Type : SERVER-WEBAPP - Revision : 6
2014-01-10JBoss JMX console access attempt
RuleID : 21516 - Type : SERVER-WEBAPP - Revision : 9
2014-01-10Apache Tomcat Java AJP connector invalid header timeout denial of service att...
RuleID : 20613 - Type : SPECIFIC-THREATS - Revision : 2
2014-01-10Apache Tomcat Java AJP connector invalid header timeout DOS attempt
RuleID : 20612 - Type : SERVER-APACHE - Revision : 10
2014-01-10Apache Tomcat username enumeration attempt
RuleID : 18096 - Type : SERVER-APACHE - Revision : 7
2014-02-08HI_CLIENT_WEBROOT_DIR
RuleID : 18 - Type : HI_CLIENT_WEBROOT_DIR - Revision : 1
2014-01-10Apache Tomcat UNIX platform directory traversal
RuleID : 17502 - Type : SERVER-APACHE - Revision : 8
2014-01-10Apache Tomcat UNIX platform directory traversal
RuleID : 17501 - Type : SERVER-APACHE - Revision : 8
2014-01-10Apache Tomcat UNIX platform directory traversal
RuleID : 17500 - Type : SERVER-APACHE - Revision : 7
2014-01-10Apache Tomcat UNIX platform directory traversal
RuleID : 17499 - Type : SERVER-APACHE - Revision : 7
2014-01-10Apache Tomcat UNIX platform directory traversal
RuleID : 17498 - Type : SERVER-APACHE - Revision : 8
2014-01-10Multiple products UNIX platform backslash directory traversal attempt
RuleID : 17391 - Type : SERVER-OTHER - Revision : 16
2014-01-10Apache Tomcat allowLinking URIencoding directory traversal attempt
RuleID : 17387 - Type : SERVER-APACHE - Revision : 11
2014-01-10HP Performance Manager Apache Tomcat policy bypass attempt
RuleID : 17156 - Type : SERVER-APACHE - Revision : 8
2019-01-15HI_CLIENT_DIR_TRAV
RuleID : 11 - Type : HI_CLIENT_DIR_TRAV - Revision : 1

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
idDescription
2018-11-27Name : The remote Virtuozzo host is missing a security update.
File : Virtuozzo_VZLSA-2017-3080.nasl - Type : ACT_GATHER_INFO
2018-08-30Name : A web application running on the remote host is affected by multiple vulnerab...
File : activemq_5_15_5.nasl - Type : ACT_GATHER_INFO
2017-11-02Name : The remote Apache Tomcat server is affected by a code execution vulnerability.
File : tomcat_6_0_24.nasl - Type : ACT_GATHER_INFO
2017-11-01Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1261.nasl - Type : ACT_GATHER_INFO
2017-11-01Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1262.nasl - Type : ACT_GATHER_INFO
Hide | Show 20 More...
idDescription
2017-10-31Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2017-3080.nasl - Type : ACT_GATHER_INFO
2017-10-31Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2017-3081.nasl - Type : ACT_GATHER_INFO
2017-10-31Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20171030_tomcat6_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2017-10-31Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20171030_tomcat_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2017-10-30Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2017-3080.nasl - Type : ACT_GATHER_INFO
2017-10-30Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2017-3081.nasl - Type : ACT_GATHER_INFO
2017-10-30Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-3080.nasl - Type : ACT_GATHER_INFO
2017-10-30Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-3081.nasl - Type : ACT_GATHER_INFO
2017-10-19Name : The remote database server is affected by multiple vulnerabilities.
File : oracle_rdbms_cpu_oct_2017.nasl - Type : ACT_GATHER_INFO
2017-09-08Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1191.nasl - Type : ACT_GATHER_INFO
2017-09-08Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2017-1192.nasl - Type : ACT_GATHER_INFO
2017-08-25Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2017-2247.nasl - Type : ACT_GATHER_INFO
2017-08-23Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-2493.nasl - Type : ACT_GATHER_INFO
2017-08-22Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20170802_tomcat_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2017-08-09Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2017-2247.nasl - Type : ACT_GATHER_INFO
2017-08-02Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2017-2247.nasl - Type : ACT_GATHER_INFO
2017-07-21Name : A web application running on the remote host is affected by multiple vulnerab...
File : mysql_enterprise_monitor_3_3_4_3247.nasl - Type : ACT_GATHER_INFO
2017-07-20Name : An enterprise management application installed on the remote host is affected...
File : oracle_enterprise_manager_jul_2017_cpu.nasl - Type : ACT_GATHER_INFO
2017-07-17Name : The remote Fedora host is missing a security update.
File : fedora_2017-0e64c4c186.nasl - Type : ACT_GATHER_INFO
2017-07-13Name : The remote Virtuozzo host is missing a security update.
File : Virtuozzo_VZLSA-2017-0527.nasl - Type : ACT_GATHER_INFO