tomcat vulnerabilities (Mageia)
154 vulnerabilities.
tomcatMageiaApache Tomcat: Fix for CVE-2025-66614 is incomplete5.3 MediumtomcatMageiaApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 HightomcatMageiaApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 CriticaltomcatMageiaApache Tomcat: TLS cipher order is not preserved7.5 HightomcatMageiaApache Tomcat: Occasionally open redirect6.1 MediumtomcatMageiaApache Tomcat: Request smuggling via invalid chunk extension7.5 HightomcatMageiaApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 HightomcatMageiaApache Tomcat: Security constraint bypass with HTTP/0.93.7 LowtomcatMageiaApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 CriticaltomcatMageiaApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 MediumtomcatMageiaApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 HightomcatMageiaApache Tomcat: console manipulation via escape sequences in log messages9.6 CriticaltomcatMageiaApache Tomcat: h2 DoS - Made You Reset7.5 HightomcatMageiaApache Tomcat: DoS via excessive h2 streams at connection start7.5 HightomcatMageiaApache Tomcat: DoS via integer overflow in multipart file upload7.5 HightomcatMageiaApache Tomcat: APR/Native Connector crash leading to DoS7.5 HightomcatMageiaApache Tomcat: Security constraint bypass for pre/post-resources7.5 HightomcatMageiaApache Tomcat: FileUpload large number of parts with headers DoS7.5 HightomcatMageiaApache Tomcat: Security constraint bypass for CGI scripts7.3 HightomcatMageiaApache Tomcat: Bypass of rules in Rewrite Valve9.8 CriticaltomcatMageiaApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 HightomcatMageiaUpdated tomcat packages fix security vulnerabilitiesNo scoretomcatMageiaApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 CriticaltomcatMageiaApache Tomcat: DoS in examples web application5.3 MediumtomcatMageiaApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 CriticaltomcatMageiaApache Tomcat: Incorrect JSP tag recycling leads to XSS6.1 MediumtomcatMageiaApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 CriticaltomcatMageiaApache Tomcat: HTTP/2 excess header handling DoS7.5 HightomcatMageiaApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 MediumtomcatMageiaApache Tomcat: HTTP/2 header handling DoS7.5 HightomcatMageiaApache Tomcat: Trailer header parsing too lenient5.3 MediumtomcatMageiaApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 MediumtomcatMageiaApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 HightomcatMageiaApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 MediumtomcatMageiaApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 HightomcatMageiaApache Tomcat: JsonErrorReportValve escaping7.5 HightomcatMageiaApache Tomcat request smuggling via malformed content-length7.5 HightomcatMageiaApache Tomcat: Information disclosure3.7 LowtomcatMageiaXSS in examples web application6.1 MediumtomcatMageiaEncryptInterceptor does not provide complete protection on insecure networks7.5 HightomcatMageiaLocal privilege escalation with FileStore7.0 HightomcatMageiaDoS via memory leak with WebSocket connections7.5 HightomcatMageiaApache Tomcat DoS with unexpected TLS packet7.5 HightomcatMageiaIncorrect Transfer-Encoding handling with HTTP/1.05.3 MediumtomcatMageiaAuth weakness in JNDIRealm6.5 MediumtomcatMageiaIncomplete fix for CVE-2020-94847.0 HightomcatMageiaApache Tomcat h2c request mix-up7.5 HightomcatMageiaApache Tomcat information disclosure5.9 MediumtomcatMageiaApache Tomcat: Request header mix-up between HTTP/2 streams7.5 HightomcatMageiaExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Medium- Show moreLoading…