org.apache.tomcat.embed:tomcat-embed-logging-log4j vulnerabilities (TuxCare)
16 vulnerabilities.
org.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat.embed:tomcat-embed-logging-log4jTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 High