tomcat10 vulnerabilities (Ubuntu)
84 vulnerabilities.
tomcat10UbuntuApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 Hightomcat10UbuntuApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 Criticaltomcat10UbuntuApache Tomcat: Occasionally open redirect6.1 Mediumtomcat10UbuntuApache Tomcat: Request smuggling via invalid chunk extension7.5 Hightomcat10UbuntuApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Hightomcat10UbuntuApache Tomcat: Security constraint bypass with HTTP/0.93.7 Lowtomcat10UbuntuApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Criticaltomcat10UbuntuApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 Mediumtomcat10UbuntuApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 Hightomcat10UbuntuApache Tomcat: console manipulation via escape sequences in log messages9.6 Criticaltomcat10UbuntuApache Tomcat: session fixation via rewrite valve6.5 Mediumtomcat10UbuntuApache Tomcat: h2 DoS - Made You Reset7.5 Hightomcat10UbuntuApache Tomcat: DoS via excessive h2 streams at connection start7.5 Hightomcat10UbuntuApache Tomcat: DoS via integer overflow in multipart file upload7.5 Hightomcat10UbuntuApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 Hightomcat10UbuntuApache Tomcat: Security constraint bypass for pre/post-resources7.5 Hightomcat10UbuntuApache Tomcat: FileUpload large number of parts with headers DoS7.5 Hightomcat10UbuntuApache Tomcat: Security constraint bypass for CGI scripts7.3 Hightomcat10UbuntuApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticaltomcat10UbuntuApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 Hightomcat10UbuntuApache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT9.8 Criticaltomcat10UbuntuApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticaltomcat10UbuntuApache Tomcat: DoS in examples web application5.3 Mediumtomcat10UbuntuApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 Criticaltomcat10UbuntuApache Tomcat: Request/response mix-up with HTTP/26.5 Mediumtomcat10UbuntuApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticaltomcat10UbuntuApache Tomcat: Denial of Service8.6 Hightomcat10UbuntuApache Tomcat: HTTP/2 excess header handling DoS7.5 Hightomcat10UbuntuApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Mediumtomcat10UbuntuApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat10UbuntuApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Mediumtomcat10UbuntuApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat10UbuntuApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat10UbuntuApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Medium