org.apache.tomcat:tomcat-catalina-ha vulnerabilities (TuxCare)
17 vulnerabilities.
org.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticalorg.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-catalina-haTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalina-haTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-catalina-haTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat:tomcat-catalina-haTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat:tomcat-catalina-haTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalina-haTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalina-haTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalina-haTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat:tomcat-catalina-haTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 High