{
  "cveId": "CVE-2015-5345",
  "url": "https://patchblox.com/security/cve/CVE-2015-5345",
  "summary": "CVE-2015-5345 is fixed in 8 products on 1 platform, first by libtomcat9-embed-java 9.0.16-3~18.04.1, released February 23, 2016. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libtomcat9-embed-java: The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M...",
  "description": "The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the existence of a directory via a URL that lacks a trailing / (slash) character.",
  "published": "2016-02-23T16:00:00Z",
  "severity": "Low",
  "epss": 0.1838,
  "epssPercentile": 0.97243,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libtomcat9-embed-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "libtomcat9-embed-java 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtomcat9-embed-java-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtomcat9-java",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "libtomcat9-java 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtomcat9-java-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9-admin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9-admin 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-admin-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9-common 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-common-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9-docs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9-docs 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-docs-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9-examples",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9-examples 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-examples-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcat9-user",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "9.0.16-3~18.04.1",
      "fix": "tomcat9-user 9.0.16-3~18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-tomcat9-user-9.0.16-3-18.04.1",
      "released": "2016-02-23T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}