tomcat11 vulnerabilities (Debian)
71 vulnerabilities.
tomcat11DebianApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 Hightomcat11DebianApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 Criticaltomcat11DebianApache Tomcat: TLS cipher order is not preserved7.5 Hightomcat11DebianApache Tomcat: Occasionally open redirect6.1 Mediumtomcat11DebianApache Tomcat: Request smuggling via invalid chunk extension7.5 Hightomcat11DebianApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Hightomcat11DebianApache Tomcat: Security constraint bypass with HTTP/0.93.7 Lowtomcat11DebianApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Criticaltomcat11DebianApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Mediumtomcat11DebianApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 Hightomcat11DebianApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticaltomcat11DebianApache Tomcat: session fixation via rewrite valve6.5 Mediumtomcat11DebianApache Tomcat: h2 DoS - Made You Reset7.5 Hightomcat11DebianApache Tomcat: DoS via excessive h2 streams at connection start7.5 Hightomcat11DebianApache Tomcat: DoS via integer overflow in multipart file upload7.5 Hightomcat11DebianApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 Hightomcat11DebianApache Tomcat: Security constraint bypass for pre/post-resources7.5 Hightomcat11DebianApache Tomcat: FileUpload large number of parts with headers DoS7.5 Hightomcat11DebianApache Tomcat: Security constraint bypass for CGI scripts7.3 Hightomcat11DebianApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticaltomcat11DebianApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 High