Lucene search

BtomATLASSIAN:CONFSERVER-29345

HistoryMay 21, 2013 - 12:23 a.m.

Upgrade bundled Tomcat to 6.0.37

2013-05-2100:23:31

btom

jira.atlassian.com

0.718 High

EPSS

Percentile

98.1%

JSON

{panel:bgColor=#e7f4fa}
NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? [See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-29345].
{panel}

Customer related a security flaw in Tomcat 6.0.35 and requests that we upgrade the bundled version.

CPENameOperatorVersion
confluence serverle5.1.2

CPE	Name	Operator	Version
	confluence server	le	5.1.2

atlassian

Upgrade bundled Tomcat to 6.0.37

2013-05-21 00:23:31

Upgrade bundled Tomcat to 6.0.37

2013-05-21 00:23:31

Upgrade bundled Tomcat to the latest minor release

2013-06-19 09:30:24

openvas

FreeBSD Ports: tomcat

2012-11-26 00:00:00

Fedora Update for tomcat FEDORA-2012-20151

2012-12-26 00:00:00

Apache Tomcat 6.x < 6.0.36 Multiple Vulnerabilities (Oct 2012) - Linux

2021-10-29 00:00:00

fedora

[SECURITY] Fedora 16 Update: tomcat-7.0.33-1.fc16

2012-12-19 08:29:53

[SECURITY] Fedora 17 Update: tomcat-7.0.40-1.fc17

2013-05-21 08:28:12

[SECURITY] Fedora 18 Update: tomcat-7.0.40-1.fc18

2013-05-21 08:45:56

tomcat

Fixed in Apache Tomcat 6.0.36

2012-10-19 00:00:00

Fixed in Apache Tomcat 7.0.30

2012-09-06 00:00:00

Fixed in Apache Tomcat 7.0.28

2012-06-19 00:00:00

K20038622 : Multiple Apache Tomcat vulnerabilities

2020-08-06 00:00:00

thn

Apache Tomcat Multiple Critical Vulnerabilities

2012-12-05 06:45:00

Apache Tomcat Multiple Critical Vulnerabilities

2012-12-05 17:45:00

nessus

Debian DSA-2725-1 : tomcat6 - several vulnerabilities

2013-07-19 00:00:00

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : tomcat6, tomcat7 vulnerabilities (USN-1685-1)

2013-01-15 00:00:00

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : tomcat6, tomcat7 vulnerabilities (USN-1841-1)

2013-05-29 00:00:00

osv

tomcat6 - several

2013-07-18 00:00:00

tomcat7 - security update

2014-04-08 00:00:00

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-17 02:44:28

securityvulns

Apache Tomcat multiple security vulnerabilities

2012-12-07 00:00:00

Apache Tomcat security vulnerabilities

2013-05-10 00:00:00

CVE-2012-4534 Apache Tomcat denial of service

2012-12-07 00:00:00

ubuntu

Tomcat vulnerabilities

2013-01-14 00:00:00

Tomcat vulnerabilities

2013-05-28 00:00:00

debian

[SECURITY] [DSA 2725-1] tomcat6 security update

2013-07-18 17:58:50

[SECURITY] [DSA 2897-1] tomcat7 security update

2014-04-08 18:25:14

redhat

(RHSA-2013:1011) Moderate: Red Hat JBoss Web Server 2.0.1 update

2013-07-03 00:00:00

(RHSA-2013:1012) Moderate: Red Hat JBoss Web Server 2.0.1 update

2013-07-03 15:40:17

(RHSA-2013:0266) Moderate: tomcat6 security update

2013-02-19 20:29:27

gentoo

Apache Tomcat: Multiple vulnerabilities

2014-12-15 00:00:00

oraclelinux

tomcat6 security update

2013-03-11 00:00:00

tomcat6 security update

2013-06-20 00:00:00

vmware

VMware security updates for vCenter Server

2013-04-25 00:00:00

VMware security updates for vCenter Server

2013-04-25 00:00:00

mageia

Updated tomcat6 packages fix multiple vulnerabilities and logging

2014-02-17 22:13:24

Updated tomcat7 packages fix CVE-2013-2071

2013-07-01 23:08:10

prion

Design/Logic Flaw

2012-12-19 11:55:00

Cross site request forgery (csrf)

2012-11-16 21:55:00

Cross site scripting

2012-08-14 23:55:00

cvelist

CVE-2012-3439

1976-01-01 00:00:00

CVE-2012-4431

2012-12-19 11:00:00

CVE-2013-2067

2013-06-01 10:00:00

cve

CVE-2012-2071

2012-08-14 23:55:01

CVE-2012-4534

2012-12-19 11:55:54

CVE-2013-2071

2013-06-01 14:21:05

drupal

SA-CONTRIB-2012-044 - Contact Forms - Cross Site Scripting

2012-03-28 00:00:00

nvd

CVE-2012-2733

2012-11-16 21:55:01

CVE-2012-2071

2012-08-14 23:55:01

CVE-2013-2071

2013-06-01 14:21:05

checkpoint_advisories

Apache Tomcat NIO Connector Denial of Service (CVE-2012-4534)

2013-01-14 00:00:00

debiancve

CVE-2012-4534

2012-12-19 11:55:00

CVE-2012-4431

2012-12-19 11:55:00

CVE-2013-2071

2013-06-01 14:21:00

freebsd

tomcat -- Denial of Service

2012-11-05 00:00:00

tomcat -- authentication weaknesses

2012-11-05 00:00:00

tomcat -- bypass of CSRF prevention filter

2012-12-04 00:00:00

ubuntucve

CVE-2012-2733

2012-11-16 00:00:00

CVE-2012-4534

2012-12-19 00:00:00

CVE-2012-4431

2012-12-19 00:00:00

veracode

Session Fixation During Completion Of The Login Form

2019-01-15 08:55:05

Cross-site Request Forgery (CSRF)

2019-01-15 08:56:33

Authentication Bypass When FORM Authentication Is Used

2019-01-15 08:52:32

seebug

Apache Tomcat DIGEST身份验证多个安全漏洞(CVE-2012-3439)

2012-11-07 00:00:00

Apache Tomcat 跨站请求伪造漏洞

2012-12-07 00:00:00

Apache Tomcat 信息泄露漏洞(CVE-2013-2071)

2013-05-17 00:00:00

github

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2022-05-17 02:44:28

Cross-Site Request Forgery in Apache Tomcat

2022-05-17 00:57:51

Improper Authentication in Apache Tomcat

2022-05-14 01:10:35

centos

tomcat6 security update

2013-03-12 05:31:44

tomcat6 security update

2013-06-20 17:46:38

amazon

Low: tomcat7

2013-05-24 13:55:00

0.718 High

EPSS

Percentile

98.1%

JSON

Related for ATLASSIAN:CONFSERVER-29345