Known vulnerabilities in libtomcat6-java (Ubuntu package) 6.0.35-1ubuntu3.2

Vendor: Canonical Ltd.
Software: libtomcat6-java (Ubuntu package)
Version: 6.0.35-1ubuntu3.2
Software CPE: cpe:2.3:o:canonical:libtomcat6-java:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting libtomcat6-java (Ubuntu package) version 6.0.35-1ubuntu3.2 libtomcat6-java (Ubuntu package) 6.0.35-1ubuntu3.2 is affected by 20 vulnerabilities: 4 high, 11 medium, 5 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87536 - Cross-Site Request Forgery (CSRF)
CVE-2015-5351		 CWE-352 Medium
No
No
 6.0.35-1ubuntu3.7 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU87535 - Session Fixation
CVE-2015-5346		 CWE-384 High
No
No
 6.0.35-1ubuntu3.7 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 7 more
#VU87534 - Permissions, Privileges, and Access Controls
CVE-2016-0763		 CWE-264 Medium
No
No
 6.0.35-1ubuntu3.7 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 7 more
#VU64583 - Improper Access Control
CVE-2014-7810		 CWE-284 Low
No
No
 6.0.35-1ubuntu3.6 22.06.2022 SB2022121104
SB2023012603
SB2016010615
and 2 more
#VU64581 - Resource Management Errors
CVE-2014-0230		 CWE-399 Medium
No
No
 6.0.35-1ubuntu3.6 22.06.2022 SB2022072819
SB2023022218
SB2015101508
and 4 more
#VU64555 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2014-0227		 CWE-444 High
No
No
 6.0.35-1ubuntu3.6 21.06.2022 SB2023022219
SB2015101508
SB2015042105
and 3 more
#VU64554 - Integer overflow
CVE-2014-0099		 CWE-190 Medium
No
No
 6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 3 more
#VU64550 - Permissions, Privileges, and Access Controls
CVE-2014-0096		 CWE-264 Medium
No
No
 6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2015101508
SB2014090407
SB2015021401
and 1 more
#VU64548 - Integer overflow
CVE-2014-0075		 CWE-190 Medium
No
No
 6.0.24-2ubuntu1.16, 6.0.35-1ubuntu3.5 21.06.2022 SB2023022221
SB2015101508
SB2014090407
and 3 more
#VU64546 - Improper input validation
CVE-2014-0033		 CWE-20 Medium
No
No
 6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015030606
#VU64543 - Improper input validation
CVE-2013-4322		 CWE-20 Medium
No
No
 6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015101508
SB2023101722
and 1 more
#VU64542 - Improper input validation
CVE-2013-4286		 CWE-20 Medium
No
No
 6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 21.06.2022 SB2023022130
SB2015101508
SB2014102006
and 2 more
#VU28634 - Improper input validation
CVE-2017-6056		 CWE-20 High
No
No
 6.0.35-1ubuntu3.11 04.06.2020 SB2019101584
SB2023022235
SB2017050819
and 1 more
#VU28623 - Improper input validation
CVE-2017-6056		 CWE-20 High
No
No
 6.0.35-1ubuntu3.11 04.06.2020 SB2019101589
SB2017022031
#VU5233 - Resource exhaustion
CVE-2014-0050		 CWE-400 Medium
Public exploit available
No
 6.0.24-2ubuntu1.15, 6.0.35-1ubuntu3.4 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 13 more
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714		 CWE-94 Low
No
No
 6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706		 CWE-200 Low
No
No
 6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345		 CWE-200 Low
No
No
 6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174		 CWE-22 Low
No
No
 6.0.35-1ubuntu3.7 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 9 more
#VU197 - Resource exhaustion
CVE-2016-3092		 CWE-400 Medium
No
No
 6.0.35-1ubuntu3.7 22.07.2016 SB2016070602
SB2016070203
SB2016063002
and 21 more