Known vulnerabilities in tomcat7 (Ubuntu package)

Vendor: Canonical Ltd.
Software: tomcat7 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:tomcat7_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 5
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat7 (Ubuntu package) tomcat7 (Ubuntu package) is affected by 5 known vulnerabilities: 2 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329		 CWE-502 Medium
No
No
 Ubuntu Pro 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 Ubuntu Pro 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more
#VU18638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0221		 CWE-79 Low
Available
No
 Ubuntu Pro 30.05.2019 SB2019041101
SB2019070106
SB2019072501
and 13 more
#VU8669 - Improper input validation
CVE-2017-12617		 CWE-20 High
Available
Exploited
 Ubuntu Pro 04.10.2017 SB2017100401
SB2017102604
SB2017112403
and 20 more
#VU8543 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12616		 CWE-200 Low
No
No
 Ubuntu Pro 21.09.2017 SB2017092101
SB2017092116
SB2017112404
and 2 more