org.apache.tomcat:tomcat-catalina vulnerabilities (TuxCare)
94 vulnerabilities.
org.apache.tomcat:tomcat-catalinaTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat: JsonErrorReportValve escaping7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat request smuggling via malformed content-length7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat: Information disclosure3.7 Loworg.apache.tomcat:tomcat-catalinaTuxCareXSS in examples web application6.1 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareEncryptInterceptor does not provide complete protection on insecure networks7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareLocal privilege escalation with FileStore7.0 Highorg.apache.tomcat:tomcat-catalinaTuxCareDoS via memory leak with WebSocket connections7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareIncorrect Transfer-Encoding handling with HTTP/1.05.3 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareIncomplete fix for CVE-2020-94847.0 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat information disclosure5.9 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCarePotential remote code execution in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-catalinaTuxCareImproper Privilege Management in Tomcat9.8 Criticalorg.apache.tomcat:tomcat-catalinaTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-catalinaTuxCareIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat OS Command Injection vulnerability8.1 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareThe host name verification missing in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Highorg.apache.tomcat:tomcat-catalinaTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat:tomcat-catalinaTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareExposure of Resource to Wrong Sphere in Apache Tomcat9.1 Criticalorg.apache.tomcat:tomcat-catalinaTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat Improper Access Control vulnerability9.8 Criticalorg.apache.tomcat:tomcat-catalinaTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat:tomcat-catalinaTuxCareIncorrect Authorization in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 Highorg.apache.tomcat:tomcat-catalinaTuxCareSystem Property Disclosure in Apache Tomcat5.3 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Criticalorg.apache.tomcat:tomcat-catalinaTuxCareObservable Discrepancy in Apache Tomcat5.9 Mediumorg.apache.tomcat:tomcat-catalinaTuxCareImproper Access Control in Apache Tomcat8.1 High