Every CVESearch/Get API key

SUSE-SU-2022:1293-1

Security update for tomcat

No scoreFix available

SUSE-SU-2022:1293-1 is a vulnerability with no CVSS score yet in tomcat, published April 21, 2022. No source lists public exploit code. Fixed in tomcat 9.0.36-150100.4.76.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
9.0.36-150100.4.76.1tomcat +5 more

Description

This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:

  • Deprecate getResources() and always return null (bsc#1198136).

Affected packages

Affected packages
PackageAffectedFixed
tomcat
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1
tomcat
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1
tomcat
SUSE:Linux Enterprise Server 15 SP1-BCL
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1
tomcat
SUSE:Linux Enterprise Server 15 SP1-LTSS
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1
tomcat
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1
tomcat
SUSE:Enterprise Storage 6
before 9.0.36-150100.4.76.1
9.0.36-150100.4.76.1

What each source reports

OSVNo score

Security update for tomcat

This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:

  • Deprecate getResources() and always return null (bsc#1198136).
Record
SUSE-SU-2022:1293-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open