tomcat-servlet-6.0-api vulnerabilities (AlmaLinux)
17 vulnerabilities.
-
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Security constraints not correctly applied 9.1 Critical -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: AJP secret compared in non-constant time 3.7 Low -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: LockOutRealm treats user names as case-sensitive 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: HTTP/2 request headers not validated 9.8 Critical -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: WebSocket authentication header exposure 7.3 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Fix for CVE-2025-66614 is incomplete 5.3 Medium -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS 5.3 Medium -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: DoS in examples web application 5.3 Medium -
tomcat-servlet-6.0-apiAlmaLinux Apache Tomcat: Authentication bypass when using Jakarta Authentication API 9.8 Critical