libtomcat7-java vulnerabilities (TuxCare)

13 vulnerabilities.

• libtomcat7-java TuxCare Apache Tomcat: Security constraints for default servlet ignored method CVE-2026-55956 Fix available 6.5 MediumJune 29, 2026
• libtomcat7-java TuxCare Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind CVE-2026-55957 Public exploitFix available 7.3 HighMay 19, 2026
• libtomcat7-java TuxCare Apache Tomcat: Security constraints not correctly applied CVE-2026-43515 Public exploitFix available 9.1 CriticalMay 12, 2026
• libtomcat7-java TuxCare Apache Tomcat: AJP secret compared in non-constant time CVE-2026-43514 Fix available 3.7 LowMay 12, 2026
• libtomcat7-java TuxCare Apache Tomcat: LockOutRealm treats user names as case-sensitive CVE-2026-43513 Fix available 7.5 HighMay 12, 2026
• libtomcat7-java TuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user CVE-2026-43512 Public exploitFix available 9.8 CriticalMay 12, 2026
• libtomcat7-java TuxCare Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling CVE-2026-41284 Fix available 7.5 HighMay 12, 2026
• libtomcat7-java TuxCare Incomplete fix for CVE-2020-9484 CVE-2021-25329 Fix available 7.0 HighMarch 1, 2021
• libtomcat7-java TuxCare Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• libtomcat7-java TuxCare Potential remote code execution in Apache Tomcat CVE-2020-9484 Public exploitFix available EPSS 55.5% 7.0 HighMay 11, 2020
• libtomcat7-java TuxCare Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• libtomcat7-java TuxCare Cross-site scripting in Apache Tomcat CVE-2019-0221 Public exploitFix available EPSS 59.2% 6.1 MediumMay 28, 2019
• libtomcat7-java TuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins CVE-2018-8014 Fix available EPSS 20.9% 9.8 CriticalMay 16, 2018