CVE-2016-5388 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-5388 Interim 1 22 2023-12-08T01:50:31Z current 2021-05-30T13:43:44Z 2023-12-08T01:50:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-5388 Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-August/002240.html E-Mail link for SUSE-SU-2016:2188-1 https://lists.suse.com/pipermail/sle-security-updates/2016-September/002253.html E-Mail link for SUSE-SU-2016:2229-1 https://lists.suse.com/pipermail/sle-security-updates/2017-June/002968.html E-Mail link for SUSE-SU-2017:1632-1 https://lists.suse.com/pipermail/sle-security-updates/2017-June/002971.html E-Mail link for SUSE-SU-2017:1660-1 https://www.suse.com/support/kb/doc/?id=7017856 E-Mail link for TID7017856 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-7.0.54-8.el7_2 tomcat-7.0.78-7.13.4 tomcat-8.0.32-8.7 tomcat-admin-webapps-7.0.54-8.el7_2 tomcat-admin-webapps-7.0.78-7.13.4 tomcat-admin-webapps-8.0.32-8.7 tomcat-docs-webapp-7.0.54-8.el7_2 tomcat-docs-webapp-7.0.78-7.13.4 tomcat-docs-webapp-8.0.32-8.7 tomcat-el-2.2-api-7.0.54-8.el7_2 tomcat-el-2_2-api-7.0.78-7.13.4 tomcat-el-3_0-api-8.0.32-8.7 tomcat-javadoc-7.0.54-8.el7_2 tomcat-javadoc-7.0.78-7.13.4 tomcat-javadoc-8.0.32-8.7 tomcat-jsp-2.2-api-7.0.54-8.el7_2 tomcat-jsp-2_2-api-7.0.78-7.13.4 tomcat-jsp-2_3-api-8.0.32-8.7 tomcat-jsvc-7.0.54-8.el7_2 tomcat-lib-7.0.54-8.el7_2 tomcat-lib-7.0.78-7.13.4 tomcat-lib-8.0.32-8.7 tomcat-servlet-3.0-api-7.0.54-8.el7_2 tomcat-servlet-3_0-api-7.0.78-7.13.4 tomcat-servlet-3_1-api-8.0.32-8.7 tomcat-webapps-7.0.54-8.el7_2 tomcat-webapps-7.0.78-7.13.4 tomcat-webapps-8.0.32-8.7 tomcat6-6.0.53-0.56.1 tomcat6-admin-webapps-6.0.53-0.56.1 tomcat6-docs-webapp-6.0.53-0.56.1 tomcat6-javadoc-6.0.53-0.56.1 tomcat6-jsp-2_1-api-6.0.53-0.56.1 tomcat6-lib-6.0.53-0.56.1 tomcat6-servlet-2_5-api-6.0.53-0.56.1 tomcat6-webapps-6.0.53-0.56.1 tomcat-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-admin-webapps-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-docs-webapp-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-el-2.2-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-javadoc-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-jsp-2.2-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-jsvc-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-lib-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-servlet-3.0-api-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat-webapps-7.0.54-8.el7_2 as a component of SUSE Liberty Linux 7 tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server 11 SP4 tomcat-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-admin-webapps-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-docs-webapp-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-el-3_0-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-javadoc-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-jsp-2_3-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-lib-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-servlet-3_1-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-webapps-8.0.32-8.7 as a component of SUSE Linux Enterprise Server 12 SP1 tomcat-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-admin-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-docs-webapp-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-el-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-javadoc-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-jsp-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-lib-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-servlet-3_0-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server 12-LTSS tomcat6-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-admin-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-docs-webapp-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-javadoc-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-jsp-2_1-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-lib-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-servlet-2_5-api-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat6-webapps-6.0.53-0.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 tomcat-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-admin-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-docs-webapp-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-el-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-javadoc-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-jsp-2_2-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-lib-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-servlet-3_0-api-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-webapps-7.0.78-7.13.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 tomcat-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-admin-webapps-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-docs-webapp-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-el-3_0-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-javadoc-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-jsp-2_3-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-lib-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-servlet-3_1-api-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 tomcat-webapps-8.0.32-8.7 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability. CVE-2016-5388 SUSE Liberty Linux 7:tomcat-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-admin-webapps-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-docs-webapp-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-el-2.2-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-javadoc-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-jsp-2.2-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-jsvc-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-lib-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-servlet-3.0-api-7.0.54-8.el7_2 SUSE Liberty Linux 7:tomcat-webapps-7.0.54-8.el7_2 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Point of Sale 11 SP3:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-LTSS:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server 11 SP4:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server 12 SP1:tomcat-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-admin-webapps-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-docs-webapp-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-el-3_0-api-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-javadoc-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-jsp-2_3-api-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-lib-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-servlet-3_1-api-8.0.32-8.7 SUSE Linux Enterprise Server 12 SP1:tomcat-webapps-8.0.32-8.7 SUSE Linux Enterprise Server 12-LTSS:tomcat-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-admin-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-docs-webapp-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-el-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-javadoc-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-jsp-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-lib-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-servlet-3_0-api-7.0.78-7.13.4 SUSE Linux Enterprise Server 12-LTSS:tomcat-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-admin-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-docs-webapp-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-javadoc-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-jsp-2_1-api-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-lib-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-servlet-2_5-api-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:tomcat6-webapps-6.0.53-0.56.1 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-admin-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-docs-webapp-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-el-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-javadoc-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-jsp-2_2-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-lib-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-servlet-3_0-api-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12:tomcat-webapps-7.0.78-7.13.4 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-admin-webapps-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-docs-webapp-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-el-3_0-api-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-javadoc-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-jsp-2_3-api-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-lib-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-servlet-3_1-api-8.0.32-8.7 SUSE Linux Enterprise Server for SAP Applications 12 SP1:tomcat-webapps-8.0.32-8.7 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H