org.apache.tomcat:tomcat-util vulnerabilities (TuxCare)
71 vulnerabilities.
-
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector 9.1 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Digest authenticator will authenticate any unknown user 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Occasionally open redirect 6.1 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Security constraint bypass with HTTP/0.9 3.7 Low -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Client certificate verification bypass due to virtual host mapping 9.1 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS 5.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: console manipulation via escape sequences in log messages 9.6 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: session fixation via rewrite valve 6.5 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: h2 DoS - Made You Reset 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: DoS via excessive h2 streams at connection start 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: DoS via integer overflow in multipart file upload 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: APR/Native Connector crash leading to DoS 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows 8.4 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Security constraint bypass for pre/post-resources 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: FileUpload large number of parts with headers DoS 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Security constraint bypass for CGI scripts 7.3 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: DoS in examples web application 5.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: RCE due to TOCTOU issue in JSP compilation 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Authentication bypass when using Jakarta Authentication API 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Denial of Service 8.6 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: HTTP/2 excess header handling DoS 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: HTTP/2 header handling DoS 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows 5.9 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Trailer header parsing too lenient 5.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests 5.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Open redirect with FORM authentication 6.1 Medium -
org.apache.tomcat:tomcat-utilTuxCare Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations 4.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: JsonErrorReportValve escaping 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat request smuggling via malformed content-length 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat: Information disclosure 3.7 Low -
org.apache.tomcat:tomcat-utilTuxCare XSS in examples web application 6.1 Medium -
org.apache.tomcat:tomcat-utilTuxCare EncryptInterceptor does not provide complete protection on insecure networks 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Local privilege escalation with FileStore 7.0 High -
org.apache.tomcat:tomcat-utilTuxCare DoS via memory leak with WebSocket connections 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Incorrect Transfer-Encoding handling with HTTP/1.0 5.3 Medium -
org.apache.tomcat:tomcat-utilTuxCare Apache Tomcat information disclosure 5.9 Medium -
org.apache.tomcat:tomcat-utilTuxCare Infinite Loop in Apache Tomcat 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Potential remote code execution in Apache Tomcat 7.0 High -
org.apache.tomcat:tomcat-utilTuxCare Improper Privilege Management in Tomcat 9.8 Critical -
org.apache.tomcat:tomcat-utilTuxCare Insufficiently Protected Credentials in Apache Tomcat 7.0 High -
org.apache.tomcat:tomcat-utilTuxCare In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack 7.5 High -
org.apache.tomcat:tomcat-utilTuxCare Cross-site scripting in Apache Tomcat 6.1 Medium - Show olderLoading…