tomcat-vault vulnerabilities (Red Hat)

23 vulnerabilities.

• tomcat-vault Red Hat Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• tomcat-vault Red Hat Apache Tomcat information exposure vulnerability CVE-2018-1305 Public exploitFix available EPSS 14.5% 6.5 MediumFebruary 23, 2018
• tomcat-vault Red Hat When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... CVE-2017-15698 Fix available 5.9 MediumJanuary 31, 2018
• tomcat-vault Red Hat When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... CVE-2017-12613 Fix available 7.1 HighOctober 24, 2017
• tomcat-vault Red Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat CVE-2017-12617 In KEVPublic exploitFix available EPSS 100.0% 8.1 HighOctober 3, 2017
• tomcat-vault Red Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server CVE-2017-12615 In KEVPublic exploitFix available EPSS 99.7% 8.1 HighSeptember 19, 2017
• tomcat-vault Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-12616 Fix available EPSS 70.1% 7.5 HighSeptember 19, 2017
• tomcat-vault Red Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat CVE-2016-8745 Fix available EPSS 16.0% 7.5 HighJanuary 8, 2017
• tomcat-vault Red Hat Apache Tomcat Improper Access Control vulnerability CVE-2016-8735 In KEVFix available EPSS 90.3% 9.8 CriticalNovember 24, 2016
• tomcat-vault Red Hat Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• tomcat-vault Red Hat Incorrect Authorization in Apache Tomcat CVE-2016-6797 Fix available 7.5 HighOctober 28, 2016
• tomcat-vault Red Hat Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6796 Fix available 7.5 HighOctober 28, 2016
• tomcat-vault Red Hat System Property Disclosure in Apache Tomcat CVE-2016-6794 Fix available 5.3 MediumOctober 28, 2016
• tomcat-vault Red Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat CVE-2016-5018 Fix available EPSS 10.3% 9.1 CriticalOctober 28, 2016
• tomcat-vault Red Hat Observable Discrepancy in Apache Tomcat CVE-2016-0762 Fix available 5.9 MediumOctober 28, 2016
• tomcat-vault Red Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... CVE-2016-6325 7.8 HighOctober 13, 2016
• tomcat-vault Red Hat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... CVE-2016-1240 Public exploitFix available 7.8 HighSeptember 15, 2016
• tomcat-vault Red Hat High severity vulnerability that affects commons-fileupload:commons-fileupload CVE-2016-3092 Fix available EPSS 37.2% 7.5 HighJune 23, 2016
• tomcat-vault Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2015-5174 Fix available EPSS 12.6% 4.3 MediumFebruary 24, 2016
• tomcat-vault Red Hat The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not... CVE-2015-3183 Fix available EPSS 74.4% 5.0 MediumJuly 20, 2015
• tomcat-vault Red Hat The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the... CVE-2014-3581 Fix available EPSS 13.5% 5.0 MediumSeptember 11, 2014
• tomcat-vault Red Hat The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ... CVE-2013-5704 Fix available EPSS 58.0% 5.0 MediumApril 15, 2014
• tomcat-vault Red Hat Uncontrolled Resource Consumption in Apache Tomcat CVE-2014-0230 Fix available EPSS 20.2% 7.8 HighAugust 2, 2013