tomcat6-lib vulnerabilities (Red Hat)

77 vulnerabilities.

• tomcat6-lib Red Hat Potential remote code execution in Apache Tomcat CVE-2020-9484 Public exploitFix available EPSS 55.5% 7.0 HighMay 11, 2020
• tomcat6-lib Red Hat Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• tomcat6-lib Red Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat CVE-2017-12617 In KEVPublic exploitFix available EPSS 100.0% 8.1 HighOctober 3, 2017
• tomcat6-lib Red Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server CVE-2017-12615 In KEVPublic exploitFix available EPSS 99.7% 8.1 HighSeptember 19, 2017
• tomcat6-lib Red Hat Apache httpd allows remote attackers to read secret data from process memory if the Limit... CVE-2017-9798 Public exploitFix available EPSS 94.7% 7.5 HighSeptember 18, 2017
• tomcat6-lib Red Hat In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-... CVE-2017-9788 Fix available EPSS 56.8% 9.1 CriticalJuly 13, 2017
• tomcat6-lib Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• tomcat6-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-5647 Fix available EPSS 16.8% 7.5 HighApril 17, 2017
• tomcat6-lib Red Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat CVE-2016-8745 Fix available EPSS 16.0% 7.5 HighJanuary 8, 2017
• tomcat6-lib Red Hat Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• tomcat6-lib Red Hat A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... CVE-2016-8610 Public exploitFix available EPSS 39.9% 7.5 HighOctober 24, 2016
• tomcat6-lib Red Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... CVE-2016-6325 7.8 HighOctober 13, 2016
• tomcat6-lib Red Hat Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... CVE-2016-6304 Fix available EPSS 63.0% 7.5 HighSeptember 22, 2016
• tomcat6-lib Red Hat The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... CVE-2016-2183 Public exploitFix available EPSS 94.7% 7.5 HighAugust 31, 2016
• tomcat6-lib Red Hat Improper Access Control in Apache Tomcat CVE-2016-5388 Fix available EPSS 50.9% 8.1 HighJuly 18, 2016
• tomcat6-lib Red Hat Improper Access Control in Apache Tomcat CVE-2016-0714 Public exploitFix available EPSS 13.1% 8.8 HighFebruary 24, 2016
• tomcat6-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2016-0706 Fix available 4.3 MediumFebruary 24, 2016
• tomcat6-lib Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2015-5345 Fix available EPSS 18.4% 5.3 MediumFebruary 24, 2016
• tomcat6-lib Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2015-5174 Fix available EPSS 12.6% 4.3 MediumFebruary 24, 2016
• tomcat6-lib Red Hat The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,... CVE-2014-0231 Fix available EPSS 44.7% 5.0 MediumJuly 20, 2014
• tomcat6-lib Red Hat Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote... CVE-2014-0226 Public exploitFix available EPSS 85.8% 6.8 MediumJuly 20, 2014
• tomcat6-lib Red Hat The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP... CVE-2014-0118 Fix available EPSS 37.3% 4.3 MediumJuly 20, 2014
• tomcat6-lib Red Hat Missing XML Validation in Apache Tomcat CVE-2014-0119 Fix available 4.3 MediumMay 31, 2014
• tomcat6-lib Red Hat Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat CVE-2014-0099 Fix available 4.3 MediumMay 31, 2014
• tomcat6-lib Red Hat Improper Input Validation in Apache Tomcat CVE-2014-0096 Fix available 4.3 MediumMay 31, 2014
• tomcat6-lib Red Hat Integer Overflow or Wraparound in Apache Tomcat CVE-2014-0075 Public exploitFix available EPSS 17.6% 5.0 MediumMay 31, 2014
• tomcat6-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2013-4590 Fix available 4.3 MediumFebruary 26, 2014
• tomcat6-lib Red Hat Improper Input Validation in Apache Tomcat CVE-2014-0033 Fix available 4.3 MediumFebruary 26, 2014
• tomcat6-lib Red Hat Apache Tomcat Denial of Service vulnerability CVE-2013-4322 Public exploitFix available 4.3 MediumFebruary 26, 2014
• tomcat6-lib Red Hat Apache Tomcat is vulnerable to HTTP request-smuggling CVE-2013-4286 Fix available EPSS 16.2% 5.8 MediumFebruary 26, 2014
• tomcat6-lib Red Hat Commons FileUpload Denial of service vulnerability CVE-2014-0050 Public exploitFix available EPSS 83.3% 7.5 HighFebruary 7, 2014
• tomcat6-lib Red Hat Improper Access Control in Apache Tomcat CVE-2014-7810 Fix available EPSS 13.3% 5.0 MediumAugust 2, 2013
• tomcat6-lib Red Hat Uncontrolled Resource Consumption in Apache Tomcat CVE-2014-0230 Fix available EPSS 20.2% 7.8 HighAugust 2, 2013
• tomcat6-lib Red Hat Improper Input Validation in Apache Tomcat CVE-2014-0227 Fix available EPSS 21.0% 6.4 MediumAugust 2, 2013
• tomcat6-lib Red Hat The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows... CVE-2013-2051 2.6 LowJuly 9, 2013
• tomcat6-lib Red Hat The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of... CVE-2013-1976 Fix available 6.9 MediumJuly 9, 2013
• tomcat6-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2013-2071 Fix available 2.6 LowJune 1, 2013
• tomcat6-lib Red Hat Improper Authentication in Apache Tomcat CVE-2013-2067 Fix available EPSS 10.4% 6.8 MediumMay 10, 2013
• tomcat6-lib Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the... CVE-2012-4558 Fix available EPSS 22.9% 4.3 MediumFebruary 26, 2013
• tomcat6-lib Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24... CVE-2012-3499 Fix available EPSS 22.9% 4.3 MediumFebruary 26, 2013
• tomcat6-lib Red Hat Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions CVE-2012-3544 Fix available EPSS 11.0% 5.0 MediumDecember 31, 2012
• tomcat6-lib Red Hat org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0... CVE-2012-4534 2.6 LowDecember 19, 2012
• tomcat6-lib Red Hat Cross-Site Request Forgery in Apache Tomcat CVE-2012-4431 Public exploitFix available 4.3 MediumDecember 19, 2012
• tomcat6-lib Red Hat Authentication Bypass in Apache Tomcat CVE-2012-3546 Fix available EPSS 12.0% 4.3 MediumDecember 19, 2012
• tomcat6-lib Red Hat The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... CVE-2012-4557 Fix available EPSS 17.5% 5.0 MediumNovember 30, 2012
• tomcat6-lib Red Hat Improper Authentication in Apache Tomcat CVE-2012-5887 Fix available EPSS 12.1% 5.0 MediumNovember 17, 2012
• tomcat6-lib Red Hat Improper Authentication in Apache Tomcat CVE-2012-5886 Fix available 5.0 MediumNovember 17, 2012
• tomcat6-lib Red Hat Improper Access Control in Apache Tomcat CVE-2012-5885 Fix available 5.0 MediumNovember 17, 2012
• tomcat6-lib Red Hat java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache... CVE-2012-2733 5.0 MediumNovember 16, 2012
• tomcat6-lib Red Hat Denial of Service in Apache Tomcat CVE-2012-0022 Fix available EPSS 10.5% 5.0 MediumJanuary 19, 2012
• Show olderLoading…