Known vulnerabilities in Apache Tomcat 8.0.0-RC10

Software: Apache Tomcat
Version: 8.0.0-RC10
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache Tomcat version 8.0.0-RC10 Apache Tomcat 8.0.0-RC10 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87536 - Cross-Site Request Forgery (CSRF)
CVE-2015-5351
CWE-352 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 5 more
#VU87535 - Session Fixation
CVE-2015-5346
CWE-384 High
No
No
7.0.66, 8.0.30, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU87534 - Permissions, Privileges, and Access Controls
CVE-2016-0763
CWE-264 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M3 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
8.5.86, 9.0.72, 10.1.6, 11.0.0-M3 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more