Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-R7C8-HGHC-2MP8
HistoryMay 17, 2022 - 2:44 a.m.

Apache Tomcat Allows Replacing of XML Parser

2022-05-1702:44:28
Google
osv.dev
10

0.0005 Low

EPSS

Percentile

18.1%

JSON

Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application. NOTE: this vulnerability exists because of a CVE-2009-0783 regression.

Related

github 2
debiancve 1
cvelist 2
nvd 2
cve 2
ubuntucve 2
prion 2
tomcat 4
openvas 46
seebug 2
securityvulns 5
veracode 1
nessus 33
osv 1
redhat 8
fedora 3
ubuntu 1
oraclelinux 1
centos 1
debian 1
gentoo 1
ibm 1
vmware 2
threatpost 1
github
github
Apache Tomcat Allows Replacing of XML Parser
2022-05-17 02:44:28
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
debiancve
debiancve
CVE-2011-2481
2011-08-15 21:55:00
cvelist
cvelist
CVE-2011-2481
2011-08-15 21:00:00
CVE-2009-0783
2009-06-05 15:25:00
nvd
nvd
CVE-2011-2481
2011-08-15 21:55:01
CVE-2009-0783
2009-06-05 16:00:00
cve
cve
CVE-2011-2481
2011-08-15 21:55:01
CVE-2009-0783
2009-06-05 16:00:00
ubuntucve
ubuntucve
CVE-2011-2481
2011-08-15 00:00:00
CVE-2009-0783
2009-06-05 00:00:00
prion
prion
Design/Logic Flaw
2011-08-15 21:55:00
Code injection
2009-06-05 16:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.19
2011-07-19 00:00:00
Fixed in Apache Tomcat 6.0.20
2009-06-03 00:00:00
Fixed in Apache Tomcat 5.5.28
2009-09-04 00:00:00
openvas
openvas
Apache Tomcat Information Disclosure Vulnerability
2011-08-16 00:00:00
Apache Tomcat Multiple Vulnerabilities (Jun 2009)
2009-06-16 00:00:00
Fedora Core 10 FEDORA-2009-11356 (tomcat6)
2009-12-03 00:00:00
seebug
seebug
Apache TomcatδΏ‘ζ―ζ³„ιœ²ζΌζ΄ž(CVE-2011-2481)
2011-08-17 00:00:00
Apache Tomcat XMLθ§£ζžε™¨ιžζŽˆζƒζ–‡δ»Άθ―»ε†™ζΌζ΄ž
2009-06-09 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2009-0783 Apache Tomcat Information disclosure
2009-06-05 00:00:00
Apache Tomcat security vulnerabilities
2011-08-17 00:00:00
Apache Tomcat multiple security vulnerabilities
2009-06-14 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2018-11-21 06:37:28
nessus
nessus
Apache Tomcat Cross-Application File Manipulation
2009-06-22 00:00:00
Apache Tomcat 7.0.x < 7.0.17 Multiple Vulnerabilities
2011-08-01 00:00:00
Apache Tomcat 7.0.0 < 7.0.19 multiple vulnerabilities
2011-08-03 00:00:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
2022-05-02 03:18:15
redhat
redhat
(RHSA-2009:1145) Important: JBoss Enterprise Application Platform 4.3.0.CP05 update
2009-07-06 00:00:00
(RHSA-2009:1617) Low: tomcat security update for Red Hat Network Satellite Server
2009-11-30 00:00:00
(RHSA-2009:1506) Important: tomcat6 security update
2009-10-14 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: tomcat6-6.0.20-1.fc10
2009-11-27 21:56:48
[SECURITY] Fedora 11 Update: tomcat6-6.0.20-1.fc11
2009-11-27 21:36:22
[SECURITY] Fedora 12 Update: tomcat6-6.0.20-1.fc12
2009-11-27 21:50:49
ubuntu
ubuntu
Tomcat vulnerabilities
2009-06-15 00:00:00
oraclelinux
oraclelinux
tomcat security update
2009-07-21 00:00:00
centos
centos
tomcat5 security update
2009-07-29 17:30:22
debian
debian
[SECURITY] [DSA 2207-1] tomcat5.5 security update
2011-03-29 22:35:34
gentoo
gentoo
Apache Tomcat: Multiple vulnerabilities
2012-06-24 00:00:00
ibm
ibm
Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries
2023-01-27 10:54:22
vmware
vmware
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.
2009-11-20 00:00:00
VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components
2009-11-20 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

0.0005 Low

EPSS

Percentile

18.1%

JSON
Related for OSV:GHSA-R7C8-HGHC-2MP8
github2debiancve1cvelist2nvd2cve2ubuntucve2prion2tomcat4openvas46seebug2securityvulns5veracode1nessus33osv1redhat8fedora3ubuntu1oraclelinux1centos1debian1gentoo1ibm1vmware2threatpost1