http://rhn.redhat.com/errata/RHSA-2017-0457.html

http://seclists.org/oss-sec/2016/q4/502

http://svn.apache.org/viewvc?view=revision&revision=1767644

http://svn.apache.org/viewvc?view=revision&revision=1767656

http://svn.apache.org/viewvc?view=revision&revision=1767676

http://svn.apache.org/viewvc?view=revision&revision=1767684

http://tomcat.apache.org/security-6.html

http://tomcat.apache.org/security-7.html

http://tomcat.apache.org/security-8.html

http://tomcat.apache.org/security-9.html

http://www.debian.org/security/2016/dsa-3738

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

http://www.securityfocus.com/bid/94463

http://www.securitytracker.com/id/1037331

https://access.redhat.com/errata/RHSA-2017:0455

https://access.redhat.com/errata/RHSA-2017:0456

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E

https://security.netapp.com/advisory/ntap-20180607-0001/

https://usn.ubuntu.com/4557-1/

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

NIST CWE-284

OR
     *cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.48
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 7.0.0 up to (excluding) 7.0.73
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 8.0 up to (excluding) 8.0.39
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 8.5.0 up to (excluding) 8.5.7
     *cpe:2.3:a:apache:tomcat:9.0.0:-:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*
  

OR
     *cpe:2.3:a:apache:tomcat:8.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.4:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.5:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.6:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.7:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.8:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.9:*:*:*:*:*:*

OR
     *cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*
     *cpe:2.3:a:apache:

OR
     *cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:agile_engineering_data_management:6.1.3:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_engineering_data_management:6.2.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_application_session_controller:

http://rhn.redhat.com/errata/RHSA-2017-0457.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2017-0457.html Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767644 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767644 Patch

http://svn.apache.org/viewvc?view=revision&revision=1767656 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767656 Patch

http://svn.apache.org/viewvc?view=revision&revision=1767676 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767676 Patch

http://svn.apache.org/viewvc?view=revision&revision=1767684 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767684 Patch

http://www.debian.org/security/2016/dsa-3738 No Types Assigned

http://www.debian.org/security/2016/dsa-3738 Mailing List, Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch, Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html No Types Assigned

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Patch, Third Party Advisory

http://www.securityfocus.com/bid/94463 Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/94463 Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1037331 No Types Assigned

http://www.securitytracker.com/id/1037331 Broken Link, Third Party Advisory, VDB Entry

https://access.redhat.com/errata/RHSA-2017:0455 No Types Assigned

https://access.redhat.com/errata/RHSA-2017:0455 Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:0456 No Types Assigned

https://access.redhat.com/errata/RHSA-2017:0456 Third Party Advisory

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E No Types Assigned

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E Mailing List, Patch

https://security.netapp.com/advisory/ntap-20180607-0001/ No Types Assigned

https://security.netapp.com/advisory/ntap-20180607-0001/ Third Party Advisory

https://usn.ubuntu.com/4557-1/ No Types Assigned

https://usn.ubuntu.com/4557-1/ Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html No Types Assigned

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html No Types Assigned

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html Patch, Third Party Advisory

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m9:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m8:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*

Apache Software Foundation https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E [No types assigned]

Apache Software Foundation https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E

Apache Software Foundation https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E

https://usn.ubuntu.com/4557-1/ [No Types Assigned]

https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html [No Types Assigned]

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html [No Types Assigned]

https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E [No Types Assigned]

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html [No Types Assigned]

https://security.netapp.com/advisory/ntap-20180607-0001/ [No Types Assigned]

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2017-0457.html [No Types Assigned]

https://access.redhat.com/errata/RHSA-2017:0455 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2017:0456 [No Types Assigned]

http://www.debian.org/security/2016/dsa-3738 [No Types Assigned]

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html [No Types Assigned]

http://www.securitytracker.com/id/1037331 [No Types Assigned]

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

CWE-284

OR
     *cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:6.0.17:*:*

OR
     *cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:7.0.17:*:*

OR
     *cpe:2.3:a:apache:tomcat:8.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.10:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.11:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.12:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.13:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.14:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.15:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.16:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.0.17:*:*

OR
     *cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:

http://seclists.org/oss-sec/2016/q4/502 No Types Assigned

http://seclists.org/oss-sec/2016/q4/502 Mailing List, Mitigation, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767644 No Types Assigned

http://svn.apache.org/viewvc?view=revision&revision=1767644 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767656 No Types Assigned

http://svn.apache.org/viewvc?view=revision&revision=1767656 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767676 No Types Assigned

http://svn.apache.org/viewvc?view=revision&revision=1767676 Issue Tracking, Patch, Third Party Advisory

http://svn.apache.org/viewvc?view=revision&revision=1767684 No Types Assigned

http://svn.apache.org/viewvc?view=revision&revision=1767684 Issue Tracking, Patch, Third Party Advisory

http://tomcat.apache.org/security-6.html No Types Assigned

http://tomcat.apache.org/security-6.html Release Notes, Vendor Advisory

http://tomcat.apache.org/security-7.html No Types Assigned

http://tomcat.apache.org/security-7.html Release Notes, Vendor Advisory

http://tomcat.apache.org/security-8.html No Types Assigned

http://tomcat.apache.org/security-8.html Release Notes, Vendor Advisory

http://tomcat.apache.org/security-9.html No Types Assigned

http://tomcat.apache.org/security-9.html Release Notes, Vendor Advisory

http://www.securityfocus.com/bid/94463 No Types Assigned

http://www.securityfocus.com/bid/94463 Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/94463 [No Types Assigned]