Known vulnerabilities in tomcat8 (Debian package)

Vendor: Debian

Software: tomcat8 (Debian package)

Software CPE: cpe:2.3:o:debian:tomcat8_debian_package:*:*:*:*:*:debian_linux:*:*

Website: https://www.debian.org/

Total vulnerabilities: 5

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU25807 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-1935	CWE-444	Medium	No	No	8.5.54-0+deb9u1	06.03.2020	SB2020022111 SB2020031401 SB2020031402 and 15 more
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2019-17569	CWE-444	Medium	No	No	8.5.54-0+deb9u1	06.03.2020	SB2020022111 SB2020031401 SB2020031402 and 6 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-1938	CWE-22	High	Available	Exploited	8.5.54-0+deb9u1	21.02.2020	SB2020022111 SB2020031401 SB2020031402 and 31 more
#VU6674 - Exposure of sensitive information to an unauthorized actor CVE-2017-5647	CWE-200	Low	No	No	8.0.14-1+deb8u9	24.05.2017	SB2017052404 SB2017051529 SB2017051022 and 12 more
#VU6675 - Improper Access Control CVE-2017-5648	CWE-284	Low	No	No	8.0.14-1+deb8u9	24.05.2017	SB2017052404 SB2017111701 SB2017111702 and 10 more