tomcat8-lib vulnerabilities (Red Hat)

61 vulnerabilities.

• tomcat8-lib Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• tomcat8-lib Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• tomcat8-lib Red Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• tomcat8-lib Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• tomcat8-lib Red Hat Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• tomcat8-lib Red Hat Potential remote code execution in Apache Tomcat CVE-2020-9484 Public exploitFix available EPSS 55.5% 7.0 HighMay 11, 2020
• tomcat8-lib Red Hat Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• tomcat8-lib Red Hat Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935 Fix available 4.8 MediumFebruary 24, 2020
• tomcat8-lib Red Hat Insufficiently Protected Credentials in Apache Tomcat CVE-2019-12418 Fix available 7.0 HighDecember 23, 2019
• tomcat8-lib Red Hat In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack CVE-2019-17563 Fix available EPSS 10.7% 7.5 HighDecember 23, 2019
• tomcat8-lib Red Hat Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019
• tomcat8-lib Red Hat Cross-site scripting in Apache Tomcat CVE-2019-0221 Public exploitFix available EPSS 58.3% 6.1 MediumMay 28, 2019
• tomcat8-lib Red Hat Apache Tomcat Open Redirect vulnerability CVE-2018-11784 Public exploitFix available EPSS 97.7% 4.3 MediumOctober 4, 2018
• tomcat8-lib Red Hat Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check... CVE-2018-8020 Fix available 7.4 HighJuly 31, 2018
• tomcat8-lib Red Hat When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not... CVE-2018-8019 Fix available 7.4 HighJuly 31, 2018
• tomcat8-lib Red Hat The host name verification missing in Apache Tomcat CVE-2018-8034 Fix available EPSS 21.0% 7.5 HighJuly 24, 2018
• tomcat8-lib Red Hat In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder CVE-2018-1336 Fix available EPSS 20.4% 7.5 HighJuly 24, 2018
• tomcat8-lib Red Hat The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins CVE-2018-8014 Fix available EPSS 20.9% 9.8 CriticalMay 16, 2018
• tomcat8-lib Red Hat Constructed ASN.1 types with a recursive definition could exceed the stack CVE-2018-0739 Fix available EPSS 18.6% 6.5 MediumMarch 27, 2018
• tomcat8-lib Red Hat Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• tomcat8-lib Red Hat Apache Tomcat information exposure vulnerability CVE-2018-1305 Public exploitFix available EPSS 14.5% 6.5 MediumFebruary 23, 2018
• tomcat8-lib Red Hat When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... CVE-2017-15698 Fix available 5.9 MediumJanuary 31, 2018
• tomcat8-lib Red Hat When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... CVE-2017-12613 Fix available 7.1 HighOctober 24, 2017
• tomcat8-lib Red Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat CVE-2017-12617 In KEVPublic exploitFix available EPSS 100.0% 8.1 HighOctober 3, 2017
• tomcat8-lib Red Hat When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server CVE-2017-12615 In KEVPublic exploitFix available EPSS 99.7% 8.1 HighSeptember 19, 2017
• tomcat8-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-12616 Fix available EPSS 70.1% 7.5 HighSeptember 19, 2017
• tomcat8-lib Red Hat Insufficient Verification of Data Authenticity in Apache Tomcat CVE-2017-7674 Fix available 4.3 MediumAugust 10, 2017
• tomcat8-lib Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• tomcat8-lib Red Hat Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• tomcat8-lib Red Hat Exposure of Resource to Wrong Sphere in Apache Tomcat CVE-2017-5648 Fix available EPSS 13.2% 9.1 CriticalApril 17, 2017
• tomcat8-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-5647 Fix available EPSS 16.8% 7.5 HighApril 17, 2017
• tomcat8-lib Red Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat CVE-2016-8745 Fix available EPSS 16.0% 7.5 HighJanuary 8, 2017
• tomcat8-lib Red Hat A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... CVE-2016-7056 Fix available 5.5 MediumDecember 31, 2016
• tomcat8-lib Red Hat Apache Tomcat Improper Access Control vulnerability CVE-2016-8735 In KEVFix available EPSS 90.3% 9.8 CriticalNovember 24, 2016
• tomcat8-lib Red Hat Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• tomcat8-lib Red Hat Incorrect Authorization in Apache Tomcat CVE-2016-6797 Fix available 7.5 HighOctober 28, 2016
• tomcat8-lib Red Hat Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6796 Fix available 7.5 HighOctober 28, 2016
• tomcat8-lib Red Hat System Property Disclosure in Apache Tomcat CVE-2016-6794 Fix available 5.3 MediumOctober 28, 2016
• tomcat8-lib Red Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat CVE-2016-5018 Fix available EPSS 10.3% 9.1 CriticalOctober 28, 2016
• tomcat8-lib Red Hat Observable Discrepancy in Apache Tomcat CVE-2016-0762 Fix available 5.9 MediumOctober 28, 2016
• tomcat8-lib Red Hat A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... CVE-2016-8610 Public exploitFix available EPSS 39.9% 7.5 HighOctober 24, 2016
• tomcat8-lib Red Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... CVE-2016-6325 7.8 HighOctober 13, 2016
• tomcat8-lib Red Hat Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... CVE-2016-6304 Fix available EPSS 63.0% 7.5 HighSeptember 22, 2016
• tomcat8-lib Red Hat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... CVE-2016-1240 Public exploitFix available 7.8 HighSeptember 15, 2016
• tomcat8-lib Red Hat Improper Access Control in Apache Tomcat CVE-2016-5388 Fix available EPSS 50.9% 8.1 HighJuly 18, 2016
• tomcat8-lib Red Hat The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not... CVE-2016-5387 Fix available EPSS 55.7% 8.1 HighJuly 18, 2016
• tomcat8-lib Red Hat High severity vulnerability that affects commons-fileupload:commons-fileupload CVE-2016-3092 Fix available EPSS 37.2% 7.5 HighJune 23, 2016
• tomcat8-lib Red Hat Improper Verification of Source of a Communication Channel in Apache Tomcat CVE-2016-0763 Fix available EPSS 11.3% 6.3 MediumFebruary 24, 2016
• tomcat8-lib Red Hat Improper Access Control in Apache Tomcat CVE-2016-0714 Public exploitFix available EPSS 13.1% 8.8 HighFebruary 24, 2016
• tomcat8-lib Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2016-0706 Fix available 4.3 MediumFebruary 24, 2016
• Show olderLoading…