Known vulnerabilities in libtomcat6-java (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:libtomcat6-java:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libtomcat6-java (Ubuntu package) libtomcat6-java (Ubuntu package) is affected by 27 known vulnerabilities: 4 high, 17 medium, 6 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87535 - Session Fixation
CVE-2015-5346
CWE-384 High
No
No
6.0.35-1ubuntu3.7 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 7 more
#VU64583 - Improper Access Control
CVE-2014-7810
CWE-284 Low
No
No
6.0.35-1ubuntu3.6 22.06.2022 SB2022121104
SB2023012603
SB2016010615
and 2 more
#VU64581 - Resource Management Errors
CVE-2014-0230
CWE-399 Medium
No
No
6.0.35-1ubuntu3.6 22.06.2022 SB2022072819
SB2023022218
SB2015101508
and 4 more
#VU64555 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2014-0227
CWE-444 High
No
No
6.0.35-1ubuntu3.6 21.06.2022 SB2023022219
SB2015101508
SB2015042105
and 3 more
#VU64554 - Integer overflow
CVE-2014-0099
CWE-190 Medium
No
No
6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 3 more
#VU64550 - Permissions, Privileges, and Access Controls
CVE-2014-0096
CWE-264 Medium
No
No
6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2015101508
SB2014090407
SB2015021401
and 1 more
#VU64548 - Integer overflow
CVE-2014-0075
CWE-190 Medium
No
No
6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 3 more
#VU64546 - Improper input validation
CVE-2014-0033
CWE-20 Medium
No
No
6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015030606
#VU64543 - Improper input validation
CVE-2013-4322
CWE-20 Medium
No
No
6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015101508
SB2023101722
and 1 more
#VU64542 - Improper input validation
CVE-2013-4286
CWE-20 Medium
No
No
6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015101508
SB2014102006
and 2 more
#VU64540 - Improper Authentication
CVE-2012-5887
CWE-287 Medium
No
No
6.0.24-2ubuntu1.11, 6.0.32-5ubuntu1.3, 6.0.35-1ubuntu3.1 21.06.2022 SB2012111704
SB2015112101
#VU64538 - Improper Authentication
CVE-2012-5886
CWE-287 Medium
No
No
6.0.24-2ubuntu1.11, 6.0.32-5ubuntu1.3, 6.0.35-1ubuntu3.1 21.06.2022 SB2012111704
SB2015112101
#VU64536 - Permissions, Privileges, and Access Controls
CVE-2012-5885
CWE-264 Medium
No
No
6.0.24-2ubuntu1.11, 6.0.32-5ubuntu1.3, 6.0.35-1ubuntu3.1 21.06.2022 SB2013060102
SB2015112101
#VU64535 - Resource Management Errors
CVE-2012-4534
CWE-399 Low
No
No
6.0.24-2ubuntu1.12, 6.0.32-5ubuntu1.4, 6.0.35-1ubuntu3.2 21.06.2022 SB2013042902
SB2015011404
#VU64530 - Cross-Site Request Forgery (CSRF)
CVE-2012-4431
CWE-352 Medium
No
No
6.0.24-2ubuntu1.12, 6.0.32-5ubuntu1.4, 6.0.35-1ubuntu3.2 21.06.2022 SB2013042902
SB2015011404
#VU64512 - Permissions, Privileges, and Access Controls
CVE-2012-3546
CWE-264 Medium
No
No
6.0.24-2ubuntu1.12, 6.0.32-5ubuntu1.4, 6.0.35-1ubuntu3.2 20.06.2022 SB2013042902
SB2015011404
#VU64502 - Improper input validation
CVE-2012-2733
CWE-20 Medium
No
No
6.0.24-2ubuntu1.11, 6.0.32-5ubuntu1.3, 6.0.35-1ubuntu3.1 20.06.2022 SB2013042902
SB2015112101
#VU5233 - Resource exhaustion
CVE-2014-0050
CWE-400 Medium
Available
No
6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 13 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345
CWE-200 Low
No
No
6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174
CWE-22 Low
No
No
6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more


Showing elements 1 - 20 out of 27