tomcat9 vulnerabilities (Debian)
120 vulnerabilities.
tomcat9DebianApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 Hightomcat9DebianApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 Criticaltomcat9DebianApache Tomcat: TLS cipher order is not preserved7.5 Hightomcat9DebianApache Tomcat: Occasionally open redirect6.1 Mediumtomcat9DebianApache Tomcat: Request smuggling via invalid chunk extension7.5 Hightomcat9DebianApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Hightomcat9DebianApache Tomcat: Security constraint bypass with HTTP/0.93.7 Lowtomcat9DebianApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Criticaltomcat9DebianApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Mediumtomcat9DebianApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 Hightomcat9DebianApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticaltomcat9DebianApache Tomcat: session fixation via rewrite valve6.5 Mediumtomcat9DebianApache Tomcat: h2 DoS - Made You Reset7.5 Hightomcat9DebianApache Tomcat: DoS via excessive h2 streams at connection start7.5 Hightomcat9DebianApache Tomcat: DoS via integer overflow in multipart file upload7.5 Hightomcat9DebianApache Tomcat: APR/Native Connector crash leading to DoS7.5 Hightomcat9DebianApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 Hightomcat9DebianApache Tomcat: Security constraint bypass for pre/post-resources7.5 Hightomcat9DebianApache Tomcat: FileUpload large number of parts with headers DoS7.5 Hightomcat9DebianApache Tomcat: Security constraint bypass for CGI scripts7.3 Hightomcat9DebianApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticaltomcat9DebianApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 Hightomcat9DebianApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 Criticaltomcat9DebianApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticaltomcat9DebianApache Tomcat: DoS in examples web application5.3 Mediumtomcat9DebianApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Criticaltomcat9DebianApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticaltomcat9DebianApache Tomcat: Denial of Service8.6 Hightomcat9DebianApache Tomcat: HTTP/2 excess header handling DoS7.5 Hightomcat9DebianApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Mediumtomcat9DebianApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat9DebianApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Mediumtomcat9DebianApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat9Debiantomcat9 - regression updateNo scoretomcat9Debiantomcat9 - regression updateNo scoretomcat9Debiantomcat9 - regression updateNo scoretomcat9DebianApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat9DebianApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat9DebianApache Tomcat: Open redirect with FORM authentication6.1 Mediumtomcat9DebianEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Hightomcat9DebianApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumtomcat9DebianApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Hightomcat9DebianApache Tomcat: JsonErrorReportValve escaping7.5 Hightomcat9DebianApache Tomcat request smuggling via malformed content-length7.5 Hightomcat9DebianApache Tomcat: Information disclosure3.7 Lowtomcat9DebianXSS in examples web application6.1 Mediumtomcat9DebianEncryptInterceptor does not provide complete protection on insecure networks7.5 Hightomcat9DebianLocal privilege escalation with FileStore7.0 Hightomcat9DebianDoS via memory leak with WebSocket connections7.5 Hightomcat9DebianApache Tomcat DoS with unexpected TLS packet7.5 High- Show moreLoading…