tomcat-lib vulnerabilities (Red Hat)
113 vulnerabilities.
tomcat-libRed HatApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat-libRed HatApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat-libRed HatApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Mediumtomcat-libRed HatApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat-libRed HatApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat-libRed HatApache Tomcat: Open redirect with FORM authentication6.1 Mediumtomcat-libRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Hightomcat-libRed HatApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Hightomcat-libRed HatApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumtomcat-libRed HatApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Hightomcat-libRed HatApache Tomcat: JsonErrorReportValve escaping7.5 Hightomcat-libRed HatInfinite Loop in Apache Tomcat7.5 Hightomcat-libRed HatPotential remote code execution in Apache Tomcat7.0 Hightomcat-libRed HatImproper Privilege Management in Tomcat9.8 Criticaltomcat-libRed HatPotential HTTP request smuggling in Apache Tomcat4.8 Mediumtomcat-libRed HatIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 Hightomcat-libRed HatApache Tomcat Open Redirect vulnerability4.3 Mediumtomcat-libRed HatThe host name verification missing in Apache Tomcat7.5 Hightomcat-libRed HatIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Hightomcat-libRed HatThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticaltomcat-libRed HatApache Tomcat unauthorized access vulnerability5.9 Mediumtomcat-libRed HatApache Tomcat information exposure vulnerability6.5 Mediumtomcat-libRed HatUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Hightomcat-libRed HatWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Hightomcat-libRed HatInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumtomcat-libRed HatImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Hightomcat-libRed HatExposure of Resource to Wrong Sphere in Apache Tomcat9.1 Criticaltomcat-libRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Hightomcat-libRed HatConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 Hightomcat-libRed HatImproper Input Validation in Apache Tomcat7.1 Hightomcat-libRed HatIncorrect Authorization in Apache Tomcat7.5 Hightomcat-libRed HatApache Tomcat vulnerable to SecurityManager bypass7.5 Hightomcat-libRed HatSystem Property Disclosure in Apache Tomcat5.3 Mediumtomcat-libRed HatAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Criticaltomcat-libRed HatObservable Discrepancy in Apache Tomcat5.9 Mediumtomcat-libRed HatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and...7.8 Hightomcat-libRed HatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and...7.8 Hightomcat-libRed HatImproper Access Control in Apache Tomcat8.1 Hightomcat-libRed HatHigh severity vulnerability that affects commons-fileupload:commons-fileupload7.5 Hightomcat-libRed HatImproper Verification of Source of a Communication Channel in Apache Tomcat6.3 Mediumtomcat-libRed HatImproper Access Control in Apache Tomcat8.8 Hightomcat-libRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Mediumtomcat-libRed HatApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token8.8 Hightomcat-libRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat8.1 Hightomcat-libRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat5.3 Mediumtomcat-libRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat4.3 Mediumtomcat-libRed HatA certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote...5.0 Mediumtomcat-libRed HatMissing XML Validation in Apache Tomcat4.3 Mediumtomcat-libRed HatImproper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat4.3 Mediumtomcat-libRed HatImproper Input Validation in Apache Tomcat4.3 Medium- Show moreLoading…