tomcat-webapps vulnerabilities (Red Hat)
113 vulnerabilities.
tomcat-webappsRed HatApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat-webappsRed HatApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat-webappsRed HatApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Mediumtomcat-webappsRed HatApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat-webappsRed HatApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat-webappsRed HatApache Tomcat: Open redirect with FORM authentication6.1 Mediumtomcat-webappsRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Hightomcat-webappsRed HatApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Hightomcat-webappsRed HatApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumtomcat-webappsRed HatApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Hightomcat-webappsRed HatApache Tomcat: JsonErrorReportValve escaping7.5 Hightomcat-webappsRed HatInfinite Loop in Apache Tomcat7.5 Hightomcat-webappsRed HatPotential remote code execution in Apache Tomcat7.0 Hightomcat-webappsRed HatImproper Privilege Management in Tomcat9.8 Criticaltomcat-webappsRed HatPotential HTTP request smuggling in Apache Tomcat4.8 Mediumtomcat-webappsRed HatIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 Hightomcat-webappsRed HatApache Tomcat Open Redirect vulnerability4.3 Mediumtomcat-webappsRed HatThe host name verification missing in Apache Tomcat7.5 Hightomcat-webappsRed HatIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Hightomcat-webappsRed HatThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticaltomcat-webappsRed HatApache Tomcat unauthorized access vulnerability5.9 Mediumtomcat-webappsRed HatApache Tomcat information exposure vulnerability6.5 Mediumtomcat-webappsRed HatUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Hightomcat-webappsRed HatWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Hightomcat-webappsRed HatInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumtomcat-webappsRed HatImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Hightomcat-webappsRed HatExposure of Resource to Wrong Sphere in Apache Tomcat9.1 Criticaltomcat-webappsRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Hightomcat-webappsRed HatConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 Hightomcat-webappsRed HatImproper Input Validation in Apache Tomcat7.1 Hightomcat-webappsRed HatIncorrect Authorization in Apache Tomcat7.5 Hightomcat-webappsRed HatApache Tomcat vulnerable to SecurityManager bypass7.5 Hightomcat-webappsRed HatSystem Property Disclosure in Apache Tomcat5.3 Mediumtomcat-webappsRed HatAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Criticaltomcat-webappsRed HatObservable Discrepancy in Apache Tomcat5.9 Mediumtomcat-webappsRed HatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and...7.8 Hightomcat-webappsRed HatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and...7.8 Hightomcat-webappsRed HatImproper Access Control in Apache Tomcat8.1 Hightomcat-webappsRed HatHigh severity vulnerability that affects commons-fileupload:commons-fileupload7.5 Hightomcat-webappsRed HatImproper Verification of Source of a Communication Channel in Apache Tomcat6.3 Mediumtomcat-webappsRed HatImproper Access Control in Apache Tomcat8.8 Hightomcat-webappsRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Mediumtomcat-webappsRed HatApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token8.8 Hightomcat-webappsRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat8.1 Hightomcat-webappsRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat5.3 Mediumtomcat-webappsRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat4.3 Mediumtomcat-webappsRed HatA certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote...5.0 Mediumtomcat-webappsRed HatMissing XML Validation in Apache Tomcat4.3 Mediumtomcat-webappsRed HatImproper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat4.3 Mediumtomcat-webappsRed HatImproper Input Validation in Apache Tomcat4.3 Medium- Show moreLoading…