tomcat-servlet-3.0-api vulnerabilities (Red Hat)
47 vulnerabilities.
-
tomcat-servlet-3.0-apiRed Hat Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor 7.5 High -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 7.5 High -
tomcat-servlet-3.0-apiRed Hat Infinite Loop in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat Potential remote code execution in Apache Tomcat 7.0 High -
tomcat-servlet-3.0-apiRed Hat Improper Privilege Management in Tomcat 9.8 Critical -
tomcat-servlet-3.0-apiRed Hat Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
tomcat-servlet-3.0-apiRed Hat In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat Open Redirect vulnerability 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat The host name verification missing in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder 7.5 High -
tomcat-servlet-3.0-apiRed Hat The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat unauthorized access vulnerability 5.9 Medium -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat information exposure vulnerability 6.5 Medium -
tomcat-servlet-3.0-apiRed Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High -
tomcat-servlet-3.0-apiRed Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 8.1 High -
tomcat-servlet-3.0-apiRed Hat Insufficient Verification of Data Authenticity in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Handling of Exceptional Conditions in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat Exposure of Resource to Wrong Sphere in Apache Tomcat 9.1 Critical -
tomcat-servlet-3.0-apiRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat Improper Input Validation in Apache Tomcat 7.1 High -
tomcat-servlet-3.0-apiRed Hat Incorrect Authorization in Apache Tomcat 7.5 High -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
tomcat-servlet-3.0-apiRed Hat System Property Disclosure in Apache Tomcat 5.3 Medium -
tomcat-servlet-3.0-apiRed Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
tomcat-servlet-3.0-apiRed Hat Observable Discrepancy in Apache Tomcat 5.9 Medium -
tomcat-servlet-3.0-apiRed Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... 7.8 High -
tomcat-servlet-3.0-apiRed Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and... 7.8 High -
tomcat-servlet-3.0-apiRed Hat Improper Access Control in Apache Tomcat 8.1 High -
tomcat-servlet-3.0-apiRed Hat High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High -
tomcat-servlet-3.0-apiRed Hat Improper Verification of Source of a Communication Channel in Apache Tomcat 6.3 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Access Control in Apache Tomcat 8.8 High -
tomcat-servlet-3.0-apiRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token 8.8 High -
tomcat-servlet-3.0-apiRed Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat 8.1 High -
tomcat-servlet-3.0-apiRed Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat 5.3 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat A certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote... 5.0 Medium -
tomcat-servlet-3.0-apiRed Hat Missing XML Validation in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Input Validation in Apache Tomcat 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Integer Overflow or Wraparound in Apache Tomcat 5.0 Medium -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat Denial of Service vulnerability 4.3 Medium -
tomcat-servlet-3.0-apiRed Hat Apache Tomcat is vulnerable to HTTP request-smuggling 5.8 Medium -
tomcat-servlet-3.0-apiRed Hat Improper Access Control in Apache Tomcat 5.0 Medium -
tomcat-servlet-3.0-apiRed Hat Uncontrolled Resource Consumption in Apache Tomcat 7.8 High -
tomcat-servlet-3.0-apiRed Hat Improper Input Validation in Apache Tomcat 6.4 Medium