Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9xv2-5v5q-p794
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability 26 Aug
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-gcx9-497g-6cp6
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability 26 Aug
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-h3x4-894j-xpx5
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability 26 Aug
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-5m62-pw8w-7w9f
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat - Security constraints not correctly applied 12 May
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-5mp6-jrq3-r938
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat: LockOutRealm treats user names as case-sensitive 12 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-9m89-8frq-c98c
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat - AJP secret compared in non-constant time 12 May
  • Fix available
  • Severity - 3.7 (Low)
GHSA-fv25-8xcx-gqjc
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat - WebSocket authentication header exposure 12 May
  • Fix available
  • Severity - 7.3 (High)
GHSA-gx5v-xp9w-j4cg
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 12 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-h6fc-48rj-7qqh
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat - Digest authenticator will authenticate any unknown user 12 May
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-r29c-68gh-xp6x
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-coyote
 Apache Tomcat - HTTP/2 request headers not validated 12 May
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-rv64-5gf8-9qq8
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve 09 Apr
  • Fix available
  • Severity - 7.5 (High)
GHSA-x4m4-345f-5h5g
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-tribes
 Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File 09 Apr
  • Fix available
  • Severity - 7.5 (High)
GHSA-563x-q5rq-57qp
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat-coyote
 Apache Tomcat has an HTTP Request/Response Smuggling vulnerability 09 Apr
  • Fix available
  • Severity - 7.5 (High)
GHSA-69cc-cv78-qc8g
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-coyote
 Apache Tomcat: Configured cipher preference order not preserved 09 Apr
  • Fix available
  • Severity - 7.5 (High)
GHSA-8mc5-53m5-3qj2
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-coyote
 Apache Tomcat has an Improper Input Validation vulnerability 09 Apr
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-9m3c-qcxr-9x87
  • Maven/org.apache.tomcat.embed:tomcat-embed-core
  • Maven/org.apache.tomcat:tomcat
  • Maven/org.apache.tomcat:tomcat-catalina
 Apache Tomcat has an Open Redirect vulnerability 09 Apr
  • Fix available
  • Severity - 6.9 (Medium)
Load more...