org.apache.tomcat:tomcat-coyote vulnerabilities (TuxCare)
83 vulnerabilities.
org.apache.tomcat:tomcat-coyoteTuxCareEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat: JsonErrorReportValve escaping7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat request smuggling via malformed content-length7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat: Information disclosure3.7 Loworg.apache.tomcat:tomcat-coyoteTuxCareXSS in examples web application6.1 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareEncryptInterceptor does not provide complete protection on insecure networks7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareLocal privilege escalation with FileStore7.0 Highorg.apache.tomcat:tomcat-coyoteTuxCareDoS via memory leak with WebSocket connections7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareIncorrect Transfer-Encoding handling with HTTP/1.05.3 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareIncomplete fix for CVE-2020-94847.0 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat information disclosure5.9 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareUncontrolled Resource Consumption in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCarePotential remote code execution in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-coyoteTuxCareImproper Privilege Management in Tomcat9.8 Criticalorg.apache.tomcat:tomcat-coyoteTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-coyoteTuxCareIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat:tomcat-coyoteTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-coyoteTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat:tomcat-coyoteTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 High