org.apache.tomcat.embed:tomcat-embed-el vulnerabilities (TuxCare)

16 vulnerabilities.

• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations CVE-2023-28708 Fix available 4.3 MediumMarch 22, 2023
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts CVE-2023-24998 Public exploitFix available EPSS 48.8% 7.5 HighFebruary 20, 2023
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Insufficiently Protected Credentials in Apache Tomcat CVE-2019-12418 Fix available 7.0 HighDecember 23, 2019
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Cross-site scripting in Apache Tomcat CVE-2019-0221 Public exploitFix available EPSS 58.3% 6.1 MediumMay 28, 2019
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).... CVE-2019-2684 Fix available EPSS 37.6% 5.9 MediumApril 23, 2019
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Tomcat Open Redirect vulnerability CVE-2018-11784 Public exploitFix available EPSS 97.7% 4.3 MediumOctober 4, 2018
• org.apache.tomcat.embed:tomcat-embed-el TuxCare The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins CVE-2018-8014 Fix available EPSS 20.9% 9.8 CriticalMay 16, 2018
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Tomcat information exposure vulnerability CVE-2018-1305 Public exploitFix available EPSS 14.5% 6.5 MediumFebruary 23, 2018
• org.apache.tomcat.embed:tomcat-embed-el TuxCare When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server CVE-2017-12615 In KEVPublic exploitFix available EPSS 99.7% 8.1 HighSeptember 19, 2017
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-12616 Fix available EPSS 70.1% 7.5 HighSeptember 19, 2017
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2017-5647 Fix available EPSS 16.8% 7.5 HighApril 17, 2017
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• org.apache.tomcat.embed:tomcat-embed-el TuxCare Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6796 Fix available 7.5 HighOctober 28, 2016