tomcat-servlet-4.0-api vulnerabilities (TuxCare)
50 vulnerabilities.
tomcat-servlet-4.0-apiTuxCareApache Tomcat: Authenticated WebSocket session survives end of HTTP session6.8 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: Redirect after FORM auth may bypass method specific constraints9.1 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Servlet role references can bypass declarative role constraints8.1 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets8.1 Hightomcat-servlet-4.0-apiTuxCaretomcat: Fix of 3 CVEsNo scoretomcat-servlet-4.0-apiTuxCareApache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass9.1 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Security constraints for default servlet ignored method6.5 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: EncryptInterceptor not protected against replay attacks6.5 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: Logged effective web.xml is incomplete9.1 Criticaltomcat-servlet-4.0-apiTuxCaretomcat: Fix of 12 CVEsNo scoretomcat-servlet-4.0-apiTuxCareApache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind7.3 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Security constraints not correctly applied9.1 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: AJP secret compared in non-constant time3.7 Lowtomcat-servlet-4.0-apiTuxCareApache Tomcat: LockOutRealm treats user names as case-sensitive7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Digest authenticator will authenticate any unknown user9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: HTTP/2 request headers not validated9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: WebSocket authentication header exposure7.3 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Incomplete escaping of JSON access logs7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Occasionally open redirect6.1 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: Request smuggling via invalid chunk extension7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Security constraint bypass with HTTP/0.93.7 Lowtomcat-servlet-4.0-apiTuxCareApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: session fixation via rewrite valve6.5 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: h2 DoS - Made You Reset7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: DoS via integer overflow in multipart file upload7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: APR/Native Connector crash leading to DoS7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Security constraint bypass for pre/post-resources7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: FileUpload large number of parts with headers DoS7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Security constraint bypass for CGI scripts7.3 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticaltomcat-servlet-4.0-apiTuxCareApache Tomcat: Denial of Service8.6 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: HTTP/2 excess header handling DoS7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat-servlet-4.0-apiTuxCareApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat-servlet-4.0-apiTuxCareApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat-servlet-4.0-apiTuxCareEncryptInterceptor does not provide complete protection on insecure networks7.5 High