CVEs published February 25, 2016
7 CVEs were published on February 25, 2016: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- org.apache.tomcat:tomcat
- 7
Medium, low and unrated 7
- CVE-2015-5174Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows reorg.apache.tomcat:tomcat
- CVE-2015-5345The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects borg.apache.tomcat:tomcat
- CVE-2015-5346Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settinorg.apache.tomcat:tomcat
- CVE-2015-5351The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sorg.apache.tomcat:tomcat
- CVE-2016-0706Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.Storg.apache.tomcat:tomcat
- CVE-2016-0714The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 misorg.apache.tomcat:tomcat
- CVE-2016-0763The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, andorg.apache.tomcat:tomcat