Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.apache.tomcat:tomcat

maven

Binary distribution of Apache Tomcat

View on repo1.maven.org

Security Advisories for org.apache.tomcat:tomcat in maven

High
5 days ago

Apache Tomcat Vulnerable to Relative Path Traversal GSA_kwCzR0hTQS13bXdmLTljY2ctZmZmNc4ABN41

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Low
5 days ago

Apache Tomcat Vulnerable to Improper Resource Shutdown or Release GSA_kwCzR0hTQS1oZ3JyLTkzNXgtcHE3Oc4ABN42

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Low
5 days ago

Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences GSA_kwCzR0hTQS12Znd3LTVobTYtaHgyas4ABN43

maven org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
5 months ago

Apache Tomcat installer for Windows has an untrusted search path vulnerability GSA_kwCzR0hTQS00MndnLWhtNjItamN3Z84ABJEU

maven org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 2 years ago

Apache Tomcat Improper Input Validation vulnerability GSA_kwCzR0hTQS1yNmozLXB4NWctY3EzeM4AA2X8

maven org.apache.tomcat:tomcat
Moderate
about 2 years ago

Apache Tomcat Open Redirect vulnerability GSA_kwCzR0hTQS1xM213LXB2cjgtOWdnY84AA1gl

maven org.apache.tomcat:tomcat
Low
about 3 years ago

Apache Tomcat Race Condition vulnerability GSA_kwCzR0hTQS1qeDdjLTdtajUtOTQzOM4AAvGq

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Cross-site Scripting in Apache Tomcat GSA_kwCzR0hTQS02ajg4LTZ3aGcteDY4N84AAs8s

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests GSA_kwCzR0hTQS1ycDhoLXZyNDgtNGo4cM4AAfx7

maven org.apache.tomcat:tomcat
High
over 3 years ago

Deserialization of Untrusted Data in Apache Tomcat GSA_kwCzR0hTQS12NmM3LThxeDUtOGdtcM4AAdKG

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Allows Replacing of XML Parser GSA_kwCzR0hTQS1yN2M4LWhnaGMtMm1wOM4AAblp

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS0zcDVyLTdjdzMtMm02N84AAbli

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat does not follow ServletSecurity annotations GSA_kwCzR0hTQS12Y2g3LTkydmYtam00NM4AAafm

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Authentication in Apache Tomcat GSA_kwCzR0hTQS0yOGNxLTZybXgtcGpxNM4AAZ9M

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users GSA_kwCzR0hTQS1oNmM4LXJnODctZjNwY84AAZEC

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Authentication Bypass in Apache Tomcat GSA_kwCzR0hTQS1qZ20yLW01Y2ctZjY2Z84AAY_0

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Cross-Site Request Forgery in Apache Tomcat GSA_kwCzR0hTQS03NnZyLTcybXYtbWYzcc4AAY-C

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Access Control in Apache Tomcat GSA_kwCzR0hTQS05OXJmLTkydjYtY3d4NM4AAY9f

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS13cjNtLWd3OTgtbWMzas4AAXm8

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token GSA_kwCzR0hTQS13N2NnLTU5NjktNjc4d84AAWoK

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Neutralization of Input During Web Page Generation in Apache Tomcat GSA_kwCzR0hTQS1qcmNwLWMzOWgtcjI5eM4AAWoL

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat does not enforce the maxHttpHeaderSize limit GSA_kwCzR0hTQS00M3YyLTZncnAtOXBwOc4AAWOM

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat allows remote attackers to bypass intended access restrictions GSA_kwCzR0hTQS1tZzR2LXJmOHAtZ2hxcc4AAWNQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Access controll bypass in Apache Tomcat GSA_kwCzR0hTQS1wMjZ2LTk3dnAtamN4Ns4AAWNP

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Access restriction bypass in Apache Tomcat GSA_kwCzR0hTQS0zeHBqLWpndjUtcTR2ds4AAWNB

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Neutralization of Input During Web Page Generation in Apache Tomcat GSA_kwCzR0hTQS1jNzhnLXF3cHctMmpnds4AAV4l

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header GSA_kwCzR0hTQS1wdmpoLTdoOHEtcTU2cs4AAV4S

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment GSA_kwCzR0hTQS1ndmdjLXJ4bWgtNWh2d84AAVO9

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Verification of Source of a Communication Channel in Apache Tomcat GSA_kwCzR0hTQS05aGp2LTloNzUteG1wcM4AAT01

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Directory Traversal in Apache Tomcat GSA_kwCzR0hTQS05NzM3LXFtZ2MtaGZyOc4AATy0

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat does not properly handle an invalid Transfer-Encoding header GSA_kwCzR0hTQS1jeGcyLTQ5cnEtOGdjcs4AATyr

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Authentication in Apache Tomcat GSA_kwCzR0hTQS1oZmZtLWZxdjQtdzI3cs4AATyq

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Insertion of Sensitive Information into Log File in Apache Tomcat GSA_kwCzR0hTQS1jNTdwLTN2MmctdzlyZ84AATyv

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS05Z2dtLTc4OTcteDRtZ84AATyx

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Use of Hard-coded Cryptographic Key in Apache Tomcat GSA_kwCzR0hTQS02Y3I0LTdjN3AtcDN4ds4AATyt

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Authentication in Apache Tomcat GSA_kwCzR0hTQS00ZjdoLTlqMngtY21yNM4AATyu

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat GSA_kwCzR0hTQS1majZjLXByZ2otZ3Izcs4AATys

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests GSA_kwCzR0hTQS1jMzhtLXY0bTItNTI0ds4AATyn

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Authentication Bypass in Apache Tomcat GSA_kwCzR0hTQS1xOXhmLWp3cjQtdjQ0Nc4AATyo

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat is vulnerable to HTTP request-smuggling GSA_kwCzR0hTQS1qNDQ4LWo2NTMtcjN2as4AAToT

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions GSA_kwCzR0hTQS1xZnh2LTNwcGMtN3FnNc4AAToQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS04N3c5LXgyYzMtaHJqas4AAToN

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Authentication in Apache Tomcat GSA_kwCzR0hTQS02bTQ4LWp4d3gtNzZxN84AAToe

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Denial of Service vulnerability GSA_kwCzR0hTQS13cTJwLXE2NnctcThncM4AATof

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS02Z2pqLWM1bWotNGN2cM4AATod

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Integer Overflow or Wraparound in Apache Tomcat GSA_kwCzR0hTQS00NzVmLTc0d3AtcHF2Nc4AATn-

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat GSA_kwCzR0hTQS14aDV4LWo4amYtcGNweM4AATn8

maven org.apache.tomcat:tomcat
High
over 3 years ago

Uncontrolled Resource Consumption in Apache Tomcat GSA_kwCzR0hTQS1weGN4LWN4cTgtNG1td84AATn1

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS00MmozLTQ5OHEtbTZ2cM4AATn7

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Missing XML Validation in Apache Tomcat GSA_kwCzR0hTQS1wcmMzLTdmNDQtdzQ4as4AATn3

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS1xcHJ4LXEycjctM3J4Ns4AATn4

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS02dngzLWhyNDMtY2ZyaM4AATnz

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Access Control in Apache Tomcat GSA_kwCzR0hTQS1tdjQyLXB4NTQtODdqd84AATn6

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Access Control in Apache Tomcat GSA_kwCzR0hTQS00YzQzLWN3dngtOWNyaM4AATn2

maven org.apache.tomcat:tomcat
High
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS0zZ3Y3LTNoNjQtNzhjbc4AATny

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat GSA_kwCzR0hTQS1yaDhxLXZqZ2YtZ2Y3NM4AATn9

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat GSA_kwCzR0hTQS02cXI2LXg3am0teDJxNs4AATn5

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat GSA_kwCzR0hTQS02OThjLTJ4NGotZzlncc4AAToE

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Inconsistent documentation in Apache Tomcat GSA_kwCzR0hTQS0zNzJxLTMzdmgtOG1wY84AAToA

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request GSA_kwCzR0hTQS1mandwLXI2Zm0tcTZxd84AAToC

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Insufficient Verification of Data Authenticity in Apache Tomcat GSA_kwCzR0hTQS03M3J4LTNmOXIteDk0Oc4AATnv

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat GSA_kwCzR0hTQS02OGc1LThxN2YtbTM4NM4AATX5

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper socket reuse in Apache Tomcat GSA_kwCzR0hTQS1oM2NoLTVwcDItdmg2d84AATI3

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Handling of Exceptional Conditions in Apache Tomcat GSA_kwCzR0hTQS1qbXZ2LTUyNGYtaGo1as4AASWl

maven org.apache.tomcat:tomcat
High
over 3 years ago

Improper Resource Shutdown or Release in Apache Tomcat GSA_kwCzR0hTQS05Nzg1LXcyMzMteDZods4AASWD

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Unrestricted file upload vulnerability GSA_kwCzR0hTQS1oNmM4LXg1cjMtcG04OM3zoQ

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat vulnerable to SecurityManager bypass GSA_kwCzR0hTQS0zbWpwLXA5MzgtNDMyOc3ong

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

System Property Disclosure in Apache Tomcat GSA_kwCzR0hTQS0ycnZmLTMyOWYtcDk5Z83otg

maven org.apache.tomcat:tomcat
High
over 3 years ago

Incorrect Authorization in Apache Tomcat GSA_kwCzR0hTQS1xNng3LWYzM3ItM3d4eM3osg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Observable Discrepancy in Apache Tomcat GSA_kwCzR0hTQS13eGNwLWYyYzgteDZ4ds3opg

maven org.apache.tomcat:tomcat
High
over 3 years ago

Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption GSA_kwCzR0hTQS1yODRwLTg4ZzItMnZ4Ms3l_Q

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Denial of Service in Apache Tomcat GSA_kwCzR0hTQS04aDJxLXFtOXgtNTVqY83dwA

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Neutralization of Input During Web Page Generation in Apache Tomcat GSA_kwCzR0hTQS0zcDg2LXhncnEtbTZwNs3c3Q

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS13NnE3LXd3MngtN2dtM83WcA

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat affected by vulnerability in TLS and SSL protocol GSA_kwCzR0hTQS1mN3c3LTZwamMtd3dtNs3Mhg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat GSA_kwCzR0hTQS04d2NoLTlnY2ctdjJwcs3KCQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Improper Authentication in Apache Tomcat GSA_kwCzR0hTQS1oamZoLTdjNHYtN3E4aM3KAw

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Directory Traversal vulnerability GSA_kwCzR0hTQS1nZ3g5LTQ3MjgtNTg4cs3JTg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat GSA_kwCzR0hTQS1oaGpnLWc4eHEtaGhyM83CSQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Cross-site scripting in Apache Tomcat GSA_kwCzR0hTQS1qNzg4LWZ4NTctOTl3cM3CQg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information in Apache Tomcat GSA_kwCzR0hTQS13MjI3LXhjZngtM3BqOM3BjA

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Denial of Service via Malformed Request Headers GSA_kwCzR0hTQS01Y3c0LWdneDktMzZ2Z82_fQ

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Apache Tomcat information disclosure vulnerability GSA_kwCzR0hTQS03ZzU5LWhtOHYtY3dtY82-SA

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Directory Traversal vulnerability GSA_kwCzR0hTQS1tN3hqLWNjcWMtcDRnMs25Vg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Path Traversal Vulnerability GSA_kwCzR0hTQS1tOGg4LTZydmctZjRtZ823Mw

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Cross-site scripting (XSS) vulnerability GSA_kwCzR0hTQS1mOThwLTlwcDYtN3E2Y821nA

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Cross-site scripting (XSS) vulnerability GSA_kwCzR0hTQS1xNzR4LXFxaHItZjhyeM2y9Q

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Sensitive Information Disclosure GSA_kwCzR0hTQS01eDVmLTlyNnEtcTdtaM2uaw

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Does Not Properly Handle Empty Requests GSA_kwCzR0hTQS1xcmo0LXJtcWctNGhjcM2skg

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Apache Tomcat Path Traversal Vulnerability GSA_kwCzR0hTQS12NXAyLXZnM2MtcG1ycs2psg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Exposure of Sensitive Information in Apache Tomcat GSA_kwCzR0hTQS1jd3c0LXZqNXItcng1N82pTQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Example Application CSRF and XSS Vulnerabilities GSA_kwCzR0hTQS1nNzdnLXZqam0teDgzas2nEw

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat's CookieExample Vulnerable to XSS GSA_kwCzR0hTQS0zNmhwLTR4M2ctcGhyZ82iLg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Mishandles Character Sequence in Cookies GSA_kwCzR0hTQS02ajhmLTY2dmgtMzltas2iMA

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat SendMailServlet XSS GSA_kwCzR0hTQS13andyLTNqY2gtNDc5as2iKg

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat treats single quotes as delimiters in cookies GSA_kwCzR0hTQS1xZmY4LWc0OGotcHdwd82iMw

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Apache Tomcat vulnerable to Cross-site Scripting GSA_kwCzR0hTQS01YzVwLWp4dngteDdqMs2eqw

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat XSS Vulnerabilities in Examples Web Application GSA_kwCzR0hTQS1oYzM5LXJqd3AtcWZmcc2eqg

maven org.apache.tomcat:tomcat
Low
over 3 years ago

Apache Tomcat XSS In Accept-Language Headers GSA_kwCzR0hTQS14bWM5LTZwNTYtM2M0ds2ajQ

maven org.apache.tomcat:tomcat
Moderate
over 3 years ago

Apache Tomcat Directory Traversal GSA_kwCzR0hTQS00cHJoLWdxdzgtcmdoNc2XRQ

maven org.apache.tomcat:tomcat

Filter by Severity

Moderate 96 High 32 Low 11