Security Advisories for org.apache.tomcat.embed:tomcat-embed-core in maven
Critical
3 months ago
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Critical
3 months ago
Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Critical
3 months ago
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Critical
3 months ago
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
High
4 months ago
Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
4 months ago
Apache Tomcat has an Improper Authorization vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
4 months ago
Apache Tomcat has a Missing Critical Step in Authentication vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
4 months ago
Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability
maven
org.apache.tomcat:tomcat-util-scan, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
6 months ago
Apache Tomcat: LockOutRealm treats user names as case-sensitive
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
6 months ago
Apache Tomcat - AJP secret compared in non-constant time
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
6 months ago
Apache Tomcat - Security constraints not correctly applied
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
6 months ago
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
6 months ago
Apache Tomcat - HTTP/2 request headers not validated
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
6 months ago
Apache Tomcat - WebSocket authentication header exposure
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
6 months ago
Apache Tomcat - Digest authenticator will authenticate any unknown user
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
7 months ago
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
High
7 months ago
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-tribes, org.apache.tomcat:tomcat
High
7 months ago
Apache Tomcat: Configured cipher preference order not preserved
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
7 months ago
Apache Tomcat has an Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
7 months ago
Apache Tomcat has an Open Redirect vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
High
7 months ago
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
9 months ago
Apache Tomcat has an Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat-coyote-ffm, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
9 months ago
Apache Tomcat - Client certificate verification bypass
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
about 1 year ago
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Low
about 1 year ago
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
High
about 1 year ago
Apache Tomcat Vulnerable to Relative Path Traversal
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Moderate
about 1 year ago
Apache Tomcat Session Fixation vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
about 1 year ago
Apache Tomcat Improper Resource Shutdown or Release vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 1 year ago
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 1 year ago
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 1 year ago
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 1 year ago
Apache Tomcat - DoS in multipart upload
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
over 1 year ago
Apache Tomcat installer for Windows has an untrusted search path vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 1 year ago
Apache Tomcat - Security constraint bypass for pre/post-resources
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Low
over 1 year ago
Apache Tomcat - CGI security constraint bypass
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
over 1 year ago
Apache Tomcat Denial of Service via invalid HTTP priority header
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Low
over 1 year ago
Apache Tomcat Rewrite rule bypass
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Critical
over 1 year ago
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
almost 2 years ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
almost 2 years ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
almost 2 years ago
Apache Tomcat Request and/or response mix-up
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
about 2 years ago
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 2 years ago
Apache Tomcat - Denial of Service
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 2 years ago
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 3 years ago
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
maven
org.apache.tomcat.experimental:tomcat-embed-programmatic, org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
almost 3 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
about 3 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
about 3 years ago
HTTP/2 Stream Cancellation Attack
maven, swift, go
org.apache.tomcat:tomcat-coyote, com.typesafe.akka:akka-http-core_2.11, com.typesafe.akka:akka-http-core_2.12, com.typesafe.akka:akka-http-core_2.13, com.typesafe.akka:akka-http-core, org.eclipse.jetty.http2:jetty-http2-server, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-common, github.com/apple/swift-nio-http2, org.apache.tomcat.embed:tomcat-embed-core, golang.org/x/net
Moderate
about 3 years ago
Apache Tomcat Incomplete Cleanup vulnerability
maven
org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 3 years ago
Apache Tomcat Open Redirect vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
High
over 3 years ago
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 3 years ago
Apache Tomcat vulnerable to information leak
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 3 years ago
Apache Commons FileUpload denial of service vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote, commons-fileupload:commons-fileupload
High
almost 4 years ago
Apache Tomcat improperly escapes input from JsonErrorReportValve
maven
org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core
High
about 4 years ago
Apache Tomcat may reject request containing invalid Content-Length header
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 4 years ago
Denial of service in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 4 years ago
Unrestricted Upload of File with Dangerous Type Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Critical
over 4 years ago
Expected Behavior Violation in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Critical
over 4 years ago
Exposure of Resource to Wrong Sphere in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
over 4 years ago
Apache Tomcat Cross-site scripting (XSS) vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
High
over 4 years ago
Uncontrolled Resource Consumption in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
High
over 5 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 5 years ago
Information Disclosure in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 5 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Critical
over 6 years ago
Improper Privilege Management in Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 6 years ago
Apache Tomcat Denial of Service vulnerability
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 6 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
over 6 years ago
Potential HTTP request smuggling in Apache Tomcat
maven
org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 6 years ago
Potential HTTP request smuggling in Apache Tomcat
maven
org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
almost 7 years ago
Insufficiently Protected Credentials in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 7 years ago
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 7 years ago
Improper Locking in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 7 years ago
Cross-site scripting in Apache Tomcat
maven
org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core
High
over 7 years ago
Apache Tomcat OS Command Injection vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 8 years ago
Apache Tomcat Race Condition vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
High
about 8 years ago
The host name verification missing in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Critical
about 8 years ago
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
maven
org.apache.tomcat.embed:tomcat-embed-core
High
about 8 years ago
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 8 years ago
Apache Tomcat information exposure vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 8 years ago
Apache Tomcat unauthorized access vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 8 years ago
Apache Tomcat Open Redirect vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
High
about 8 years ago
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
maven
org.apache.tomcat.embed:tomcat-embed-core