org.apache.tomcat.embed:tomcat-embed-jasper vulnerabilities (TuxCare)
28 vulnerabilities.
org.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticalorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCarePotential remote code execution in Apache Tomcat7.0 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareThe host name verification missing in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat Improper Access Control vulnerability9.8 Criticalorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareIncorrect Authorization in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 Highorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareSystem Property Disclosure in Apache Tomcat5.3 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Criticalorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareObservable Discrepancy in Apache Tomcat5.9 Mediumorg.apache.tomcat.embed:tomcat-embed-jasperTuxCareImproper Access Control in Apache Tomcat8.1 High