tomcat-el-3.0-api vulnerabilities (AlmaLinux)
68 vulnerabilities.
tomcat-el-3.0-apiAlmaLinuxApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticaltomcat-el-3.0-apiAlmaLinuxApache Tomcat: DoS in examples web application5.3 Mediumtomcat-el-3.0-apiAlmaLinuxApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Criticaltomcat-el-3.0-apiAlmaLinuxApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticaltomcat-el-3.0-apiAlmaLinuxApache Tomcat: Denial of Service8.6 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: HTTP/2 excess header handling DoS7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Mediumtomcat-el-3.0-apiAlmaLinuxApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Mediumtomcat-el-3.0-apiAlmaLinuxApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat-el-3.0-apiAlmaLinuxApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat-el-3.0-apiAlmaLinuxApache Tomcat: Open redirect with FORM authentication6.1 Mediumtomcat-el-3.0-apiAlmaLinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumtomcat-el-3.0-apiAlmaLinuxApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Hightomcat-el-3.0-apiAlmaLinuxApache Tomcat: JsonErrorReportValve escaping7.5 High