CVE-2017-7674
- Source
- https://cve.org/CVERecord?id=CVE-2017-7674
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7674.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-7674
- Aliases
- Downstream
CLSA (1)
DLA (1)
DSA (1)
MGASA (1)
RHSA (2)
UBUNTU (1)
- Related
- Published
- 2017-08-11T02:29:00Z
- Modified
- 2026-10-20T10:49:03Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:apache:tomcat:8.0.0:rc10:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc3:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.0:rc5:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.17:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.18:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.19:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.20:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.21:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.22:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.23:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.24:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.25:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.26:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.27:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.28:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.29:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.30:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.31:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.32:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.33:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.34:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.35:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.36:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.37:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.38:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.39:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.40:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.41:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.42:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.43:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.44:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomcat:8.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "8.0.0-rc1" }, { "last_affected": "8.0.0-rc1" }, { "introduced": "8.0.0-rc10" }, { "last_affected": "8.0.0-rc10" }, { "introduced": "8.0.0-rc3" }, { "last_affected": "8.0.0-rc3" }, { "introduced": "8.0.0-rc5" }, { "last_affected": "8.0.0-rc5" }, { "introduced": "8.0.1" }, { "last_affected": "8.0.1" }, { "introduced": "8.0.2" }, { "last_affected": "8.0.2" }, { "introduced": "8.0.3" }, { "last_affected": "8.0.3" }, { "introduced": "8.0.4" }, { "last_affected": "8.0.4" }, { "introduced": "8.0.5" }, { "last_affected": "8.0.5" }, { "introduced": "8.0.6" }, { "last_affected": "8.0.6" }, { "introduced": "8.0.7" }, { "last_affected": "8.0.7" }, { "introduced": "8.0.8" }, { "last_affected": "8.0.8" }, { "introduced": "8.0.9" }, { "last_affected": "8.0.9" }, { "introduced": "8.0.10" }, { "last_affected": "8.0.10" }, { "introduced": "8.0.11" }, { "last_affected": "8.0.11" }, { "introduced": "8.0.12" }, { "last_affected": "8.0.12" }, { "introduced": "8.0.13" }, { "last_affected": "8.0.13" }, { "introduced": "8.0.14" }, { "last_affected": "8.0.14" }, { "introduced": "8.0.15" }, { "last_affected": "8.0.15" }, { "introduced": "8.0.16" }, { "last_affected": "8.0.16" }, { "introduced": "8.0.17" }, { "last_affected": "8.0.17" }, { "introduced": "8.0.18" }, { "last_affected": "8.0.18" }, { "introduced": "8.0.19" }, { "last_affected": "8.0.19" }, { "introduced": "8.0.20" }, { "last_affected": "8.0.20" }, { "introduced": "8.0.21" }, { "last_affected": "8.0.21" }, { "introduced": "8.0.22" }, { "last_affected": "8.0.22" }, { "introduced": "8.0.23" }, { "last_affected": "8.0.23" }, { "introduced": "8.0.24" }, { "last_affected": "8.0.24" }, { "introduced": "8.0.25" }, { "last_affected": "8.0.25" }, { "introduced": "8.0.26" }, { "last_affected": "8.0.26" }, { "introduced": "8.0.27" }, { "last_affected": "8.0.27" }, { "introduced": "8.0.28" }, { "last_affected": "8.0.28" }, { "introduced": "8.0.29" }, { "last_affected": "8.0.29" }, { "introduced": "8.0.30" }, { "last_affected": "8.0.30" }, { "introduced": "8.0.31" }, { "last_affected": "8.0.31" }, { "introduced": "8.0.32" }, { "last_affected": "8.0.32" }, { "introduced": "8.0.33" }, { "last_affected": "8.0.33" }, { "introduced": "8.0.34" }, { "last_affected": "8.0.34" }, { "introduced": "8.0.35" }, { "last_affected": "8.0.35" }, { "introduced": "8.0.36" }, { "last_affected": "8.0.36" }, { "introduced": "8.0.37" }, { "last_affected": "8.0.37" }, { "introduced": "8.0.38" }, { "last_affected": "8.0.38" }, { "introduced": "8.0.39" }, { "last_affected": "8.0.39" }, { "introduced": "8.0.40" }, { "last_affected": "8.0.40" }, { "introduced": "8.0.41" }, { "last_affected": "8.0.41" }, { "introduced": "8.0.42" }, { "last_affected": "8.0.42" }, { "introduced": "8.0.43" }, { "last_affected": "8.0.43" }, { "introduced": "8.0.44" }, { "last_affected": "8.0.44" } ], "source": "CPE_STRING" } ], "vendor_product": "apache:tomcat" } ] }- References
-
- https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f%40%3Cannounce.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r15695e6203b026c9e9070ca9fa95fb17dd4cd88e5342a7dc5e1e7b85%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r1c62634b7426bee5f553307063457b99c84af73b078ede4f2592b34e%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r409efdf706c2077ae5c37018a87da725a3ca89570a9530342cdc53e4%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2018/06/msg00008.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us
- http://www.debian.org/security/2017/dsa-3974
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.securityfocus.com/bid/100280
- https://access.redhat.com/errata/RHSA-2017:1801
- https://access.redhat.com/errata/RHSA-2017:1802
- https://access.redhat.com/errata/RHSA-2017:3081
- https://security.netapp.com/advisory/ntap-20180614-0003/
Affected packages
Git / github.com/apache/tomcat
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/tomcat
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.41" }, { "last_affected": "7.0.41" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.42" }, { "last_affected": "7.0.42" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.43" }, { "last_affected": "7.0.43" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.44" }, { "last_affected": "7.0.44" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.45" }, { "last_affected": "7.0.45" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.46" }, { "last_affected": "7.0.46" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.47" }, { "last_affected": "7.0.47" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.48" }, { "last_affected": "7.0.48" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.49" }, { "last_affected": "7.0.49" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.50" }, { "last_affected": "7.0.50" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.52" }, { "last_affected": "7.0.52" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.53" }, { "last_affected": "7.0.53" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.54" }, { "last_affected": "7.0.54" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.55" }, { "last_affected": "7.0.55" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.56" }, { "last_affected": "7.0.56" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.57" }, { "last_affected": "7.0.57" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.58" }, { "last_affected": "7.0.58" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.59" }, { "last_affected": "7.0.59" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.60" }, { "last_affected": "7.0.60" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.61" }, { "last_affected": "7.0.61" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.62" }, { "last_affected": "7.0.62" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.63" }, { "last_affected": "7.0.63" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.64" }, { "last_affected": "7.0.64" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.65" }, { "last_affected": "7.0.65" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.66" }, { "last_affected": "7.0.66" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.67" }, { "last_affected": "7.0.67" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.68" }, { "last_affected": "7.0.68" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.69" }, { "last_affected": "7.0.69" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.70" }, { "last_affected": "7.0.70" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.71" }, { "last_affected": "7.0.71" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.72" }, { "last_affected": "7.0.72" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.73" }, { "last_affected": "7.0.73" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.74" }, { "last_affected": "7.0.74" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.75" }, { "last_affected": "7.0.75" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.76" }, { "last_affected": "7.0.76" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.77" }, { "last_affected": "7.0.77" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:7.0.78:*:*:*:*:*:*:*", "range": [ { "introduced": "7.0.78" }, { "last_affected": "7.0.78" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.0" }, { "last_affected": "8.5.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.1" }, { "last_affected": "8.5.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.2" }, { "last_affected": "8.5.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.3" }, { "last_affected": "8.5.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.4" }, { "last_affected": "8.5.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.5" }, { "last_affected": "8.5.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.6" }, { "last_affected": "8.5.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.7" }, { "last_affected": "8.5.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.8" }, { "last_affected": "8.5.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.9" }, { "last_affected": "8.5.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.10" }, { "last_affected": "8.5.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.11" }, { "last_affected": "8.5.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.12" }, { "last_affected": "8.5.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.13" }, { "last_affected": "8.5.13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.14" }, { "last_affected": "8.5.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.15" }, { "last_affected": "8.5.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone1" }, { "last_affected": "9.0.0-milestone1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone10" }, { "last_affected": "9.0.0-milestone10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone11" }, { "last_affected": "9.0.0-milestone11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone12" }, { "last_affected": "9.0.0-milestone12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone13" }, { "last_affected": "9.0.0-milestone13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone14" }, { "last_affected": "9.0.0-milestone14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone15" }, { "last_affected": "9.0.0-milestone15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone16" }, { "last_affected": "9.0.0-milestone16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone17" }, { "last_affected": "9.0.0-milestone17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone18" }, { "last_affected": "9.0.0-milestone18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone19" }, { "last_affected": "9.0.0-milestone19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone2" }, { "last_affected": "9.0.0-milestone2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone20" }, { "last_affected": "9.0.0-milestone20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone21" }, { "last_affected": "9.0.0-milestone21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone3" }, { "last_affected": "9.0.0-milestone3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone4" }, { "last_affected": "9.0.0-milestone4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone5" }, { "last_affected": "9.0.0-milestone5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone6" }, { "last_affected": "9.0.0-milestone6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone7" }, { "last_affected": "9.0.0-milestone7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone8" }, { "last_affected": "9.0.0-milestone8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone9" }, { "last_affected": "9.0.0-milestone9" } ], "source": "CPE_STRING" } ] }
Affected versions
7.*
7.0.41
7.0.42
7.0.43
7.0.44
7.0.45
7.0.46
7.0.47
7.0.48
7.0.49
7.0.50
7.0.52
7.0.53
7.0.54
7.0.55
7.0.56
7.0.57
7.0.58
7.0.59
7.0.60
7.0.61
7.0.62
7.0.63
7.0.64
7.0.65
7.0.66
7.0.67
7.0.68
7.0.69
7.0.70
7.0.71
7.0.72
7.0.73
7.0.74
7.0.75
7.0.76
7.0.77
7.0.78
8.*
8.5.0
8.5.1
8.5.10
8.5.11
8.5.12
8.5.13
8.5.14
8.5.15
8.5.2
8.5.3
8.5.4
8.5.5
8.5.6
8.5.7
8.5.8
8.5.9
9.*
9.0.0-milestone1
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone14
9.0.0-milestone15
9.0.0-milestone16
9.0.0-milestone17
9.0.0-milestone18
9.0.0-milestone19
9.0.0-milestone2
9.0.0-milestone20
9.0.0-milestone21
9.0.0-milestone3
9.0.0-milestone4
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9