tomcat8 vulnerabilities (Ubuntu)
120 vulnerabilities.
tomcat8UbuntuApache Tomcat: DoS via integer overflow in multipart file upload7.5 Hightomcat8UbuntuApache Tomcat: APR/Native Connector crash leading to DoS7.5 Hightomcat8UbuntuApache Tomcat: FileUpload large number of parts with headers DoS7.5 Hightomcat8UbuntuApache Tomcat: Security constraint bypass for CGI scripts7.3 Hightomcat8UbuntuApache Tomcat: Bypass of rules in Rewrite Valve9.8 Criticaltomcat8UbuntuApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 Criticaltomcat8UbuntuApache Tomcat: DoS in examples web application5.3 Mediumtomcat8UbuntuApache Tomcat: Authentication bypass when using Jakarta Authentication API9.8 Criticaltomcat8UbuntuApache Tomcat: Denial of Service8.6 Hightomcat8UbuntuApache Tomcat: HTTP/2 excess header handling DoS7.5 Hightomcat8UbuntuApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 Mediumtomcat8UbuntuApache Tomcat: HTTP/2 header handling DoS7.5 Hightomcat8UbuntuApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Mediumtomcat8UbuntuApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Hightomcat8UbuntuApache Tomcat: Trailer header parsing too lenient5.3 Mediumtomcat8UbuntuApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Mediumtomcat8UbuntuApache Tomcat: Open redirect with FORM authentication6.1 Mediumtomcat8UbuntuEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Hightomcat8UbuntuApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 Mediumtomcat8UbuntuApache Tomcat request smuggling via malformed content-length7.5 Hightomcat8UbuntuApache Tomcat: Information disclosure3.7 Lowtomcat8UbuntuEncryptInterceptor does not provide complete protection on insecure networks7.5 Hightomcat8UbuntuLocal privilege escalation with FileStore7.0 Hightomcat8UbuntuApache Tomcat DoS with unexpected TLS packet7.5 Hightomcat8UbuntuIncorrect Transfer-Encoding handling with HTTP/1.05.3 Mediumtomcat8UbuntuAuth weakness in JNDIRealm6.5 Mediumtomcat8UbuntuIncomplete fix for CVE-2020-94847.0 Hightomcat8UbuntuApache Tomcat h2c request mix-up7.5 Hightomcat8UbuntuApache Tomcat information disclosure5.9 Mediumtomcat8UbuntuApache Tomcat: Request header mix-up between HTTP/2 streams7.5 Hightomcat8UbuntuResponse mix-up with WebSocket concurrent send and close8.6 Hightomcat8UbuntuInfinite Loop in Apache Tomcat7.5 Hightomcat8UbuntuImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 Hightomcat8UbuntuUncontrolled Resource Consumption in Apache Tomcat7.5 Hightomcat8UbuntuPotential remote code execution in Apache Tomcat7.0 Hightomcat8UbuntuImproper Privilege Management in Tomcat9.8 Criticaltomcat8UbuntuPotential HTTP request smuggling in Apache Tomcat4.8 Mediumtomcat8UbuntuInsufficiently Protected Credentials in Apache Tomcat7.0 Hightomcat8UbuntuIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack7.5 Hightomcat8UbuntuImproper Locking in Apache Tomcat7.5 Hightomcat8UbuntuCross-site scripting in Apache Tomcat6.1 Mediumtomcat8UbuntuApache Tomcat Denial of Service vulnerability7.5 Hightomcat8UbuntuApache Tomcat Open Redirect vulnerability4.3 Mediumtomcat8UbuntuApache Tomcat Race Condition vulnerability5.9 Mediumtomcat8UbuntuThe host name verification missing in Apache Tomcat7.5 Hightomcat8UbuntuIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder7.5 Hightomcat8UbuntuThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins9.8 Criticaltomcat8UbuntuApache Tomcat unauthorized access vulnerability5.9 Mediumtomcat8UbuntuApache Tomcat information exposure vulnerability6.5 Mediumtomcat8UbuntuInconsistent documentation in Apache Tomcat5.3 Medium- Show moreLoading…