tomcat vulnerabilities (openEuler)
100 vulnerabilities.
tomcatopenEulerApache Tomcat: Fix for CVE-2025-66614 is incomplete5.3 MediumtomcatopenEulerApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default7.5 HightomcatopenEulerApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled9.1 CriticaltomcatopenEulerApache Tomcat: TLS cipher order is not preserved7.5 HightomcatopenEulerApache Tomcat: Occasionally open redirect6.1 MediumtomcatopenEulerApache Tomcat: Request smuggling via invalid chunk extension7.5 HightomcatopenEulerApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 HightomcatopenEulerApache Tomcat: Security constraint bypass with HTTP/0.93.7 LowtomcatopenEulerApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 CriticaltomcatopenEulerApache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS5.3 MediumtomcatopenEulerApache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled7.5 HightomcatopenEulerApache Tomcat: console manipulation via escape sequences in log messages9.6 CriticaltomcatopenEulerApache Tomcat: session fixation via rewrite valve6.5 MediumtomcatopenEulerApache Tomcat: h2 DoS - Made You Reset7.5 HightomcatopenEulerApache Tomcat: DoS via excessive h2 streams at connection start7.5 HightomcatopenEulerApache Tomcat: DoS via integer overflow in multipart file upload7.5 HightomcatopenEulerApache Tomcat: APR/Native Connector crash leading to DoS7.5 HightomcatopenEulerApache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5 HightomcatopenEulerApache Tomcat: Security constraint bypass for pre/post-resources7.5 HightomcatopenEulerApache Tomcat: FileUpload large number of parts with headers DoS7.5 HightomcatopenEulerApache Tomcat: Security constraint bypass for CGI scripts7.3 HightomcatopenEulerApache Tomcat: Bypass of rules in Rewrite Valve9.8 CriticaltomcatopenEulerApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 HightomcatopenEulerApache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete9.8 CriticaltomcatopenEulerApache Tomcat: DoS in examples web application5.3 MediumtomcatopenEulerApache Tomcat: RCE due to TOCTOU issue in JSP compilation9.8 CriticaltomcatopenEulerApache Tomcat: Incorrect JSP tag recycling leads to XSS6.1 MediumtomcatopenEulerApache Tomcat: HTTP/2 excess header handling DoS7.5 HightomcatopenEulerApache Tomcat: WebSocket DoS with incomplete closing handshake6.3 MediumtomcatopenEulerApache Tomcat: HTTP/2 header handling DoS7.5 HightomcatopenEulerApache Tomcat: Leaking of unrelated request bodies in default error page5.3 MediumtomcatopenEulerApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 HightomcatopenEulerApache Tomcat: Trailer header parsing too lenient5.3 MediumtomcatopenEulerApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 MediumtomcatopenEulerApache Tomcat: Open redirect with FORM authentication6.1 MediumtomcatopenEulerEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HightomcatopenEulerApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 HightomcatopenEulerApache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3 MediumtomcatopenEulerApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 HightomcatopenEulerApache Tomcat request smuggling via malformed content-length7.5 HightomcatopenEulerApache Tomcat: Information disclosure3.7 LowtomcatopenEulerLocal privilege escalation with FileStore7.0 HightomcatopenEulerDoS via memory leak with WebSocket connections7.5 HightomcatopenEulerApache Tomcat DoS with unexpected TLS packet7.5 HightomcatopenEulerIncorrect Transfer-Encoding handling with HTTP/1.05.3 MediumtomcatopenEulerAuth weakness in JNDIRealm6.5 MediumtomcatopenEulerIncomplete fix for CVE-2020-94847.0 HightomcatopenEulerApache Tomcat h2c request mix-up7.5 HightomcatopenEulerApache Tomcat information disclosure5.9 MediumtomcatopenEulerResponse mix-up with WebSocket concurrent send and close8.6 High