tomcat7-docs-webapp vulnerabilities (Red Hat)
84 vulnerabilities.
-
tomcat7-docs-webappRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
tomcat7-docs-webappRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
tomcat7-docs-webappRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
tomcat7-docs-webappRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
tomcat7-docs-webappRed Hat Infinite Loop in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat Potential remote code execution in Apache Tomcat 7.0 High -
tomcat7-docs-webappRed Hat Improper Privilege Management in Tomcat 9.8 Critical -
tomcat7-docs-webappRed Hat Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
tomcat7-docs-webappRed Hat Insufficiently Protected Credentials in Apache Tomcat 7.0 High -
tomcat7-docs-webappRed Hat In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
tomcat7-docs-webappRed Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
tomcat7-docs-webappRed Hat Cross-site scripting in Apache Tomcat 6.1 Medium -
tomcat7-docs-webappRed Hat Apache Tomcat Open Redirect vulnerability 4.3 Medium -
tomcat7-docs-webappRed Hat Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check... 7.4 High -
tomcat7-docs-webappRed Hat When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not... 7.4 High -
tomcat7-docs-webappRed Hat The host name verification missing in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder 7.5 High -
tomcat7-docs-webappRed Hat The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins 9.8 Critical -
tomcat7-docs-webappRed Hat Constructed ASN.1 types with a recursive definition could exceed the stack 6.5 Medium -
tomcat7-docs-webappRed Hat Apache Tomcat unauthorized access vulnerability 5.9 Medium -
tomcat7-docs-webappRed Hat Apache Tomcat information exposure vulnerability 6.5 Medium -
tomcat7-docs-webappRed Hat When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... 5.9 Medium -
tomcat7-docs-webappRed Hat When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... 7.1 High -
tomcat7-docs-webappRed Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High -
tomcat7-docs-webappRed Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 8.1 High -
tomcat7-docs-webappRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat Apache httpd allows remote attackers to read secret data from process memory if the Limit... 7.5 High -
tomcat7-docs-webappRed Hat Insufficient Verification of Data Authenticity in Apache Tomcat 4.3 Medium -
tomcat7-docs-webappRed Hat In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-... 9.1 Critical -
tomcat7-docs-webappRed Hat Improper Handling of Exceptional Conditions in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
tomcat7-docs-webappRed Hat Exposure of Resource to Wrong Sphere in Apache Tomcat 9.1 Critical -
tomcat7-docs-webappRed Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium -
tomcat7-docs-webappRed Hat Apache Tomcat Improper Access Control vulnerability 9.8 Critical -
tomcat7-docs-webappRed Hat Improper Input Validation in Apache Tomcat 7.1 High -
tomcat7-docs-webappRed Hat Incorrect Authorization in Apache Tomcat 7.5 High -
tomcat7-docs-webappRed Hat Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
tomcat7-docs-webappRed Hat System Property Disclosure in Apache Tomcat 5.3 Medium -
tomcat7-docs-webappRed Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
tomcat7-docs-webappRed Hat Observable Discrepancy in Apache Tomcat 5.9 Medium -
tomcat7-docs-webappRed Hat A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... 7.5 High -
tomcat7-docs-webappRed Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... 7.8 High -
tomcat7-docs-webappRed Hat Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
tomcat7-docs-webappRed Hat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... 7.8 High -
tomcat7-docs-webappRed Hat The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
tomcat7-docs-webappRed Hat Improper Access Control in Apache Tomcat 8.1 High -
tomcat7-docs-webappRed Hat The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not... 8.1 High -
tomcat7-docs-webappRed Hat High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High - Show olderLoading…