org.apache.tomcat:tomcat-jasper vulnerabilities (TuxCare)
27 vulnerabilities.
org.apache.tomcat:tomcat-jasperTuxCareApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumorg.apache.tomcat:tomcat-jasperTuxCareApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareInfinite Loop in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCarePotential remote code execution in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-jasperTuxCareInsufficiently Protected Credentials in Apache Tomcat7.0 Highorg.apache.tomcat:tomcat-jasperTuxCareCross-site scripting in Apache Tomcat6.1 Mediumorg.apache.tomcat:tomcat-jasperTuxCareVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....5.9 Mediumorg.apache.tomcat:tomcat-jasperTuxCareApache Tomcat Open Redirect vulnerability4.3 Mediumorg.apache.tomcat:tomcat-jasperTuxCareThe host name verification missing in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticalorg.apache.tomcat:tomcat-jasperTuxCareApache Tomcat unauthorized access vulnerability5.9 Mediumorg.apache.tomcat:tomcat-jasperTuxCareApache Tomcat information exposure vulnerability6.5 Mediumorg.apache.tomcat:tomcat-jasperTuxCareWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highorg.apache.tomcat:tomcat-jasperTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareInsufficient Verification of Data Authenticity in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-jasperTuxCareImproper Handling of Exceptional Conditions in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareApache Tomcat Improper Access Control vulnerability9.8 Criticalorg.apache.tomcat:tomcat-jasperTuxCareImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat:tomcat-jasperTuxCareIncorrect Authorization in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareApache Tomcat vulnerable to SecurityManager bypass7.5 Highorg.apache.tomcat:tomcat-jasperTuxCareSystem Property Disclosure in Apache Tomcat5.3 Mediumorg.apache.tomcat:tomcat-jasperTuxCareAuthentication Bypass Using an Alternate Path or Channel in Apache Tomcat9.1 Criticalorg.apache.tomcat:tomcat-jasperTuxCareObservable Discrepancy in Apache Tomcat5.9 Mediumorg.apache.tomcat:tomcat-jasperTuxCareImproper Access Control in Apache Tomcat8.1 High