Security Advisories for org.apache.tomcat:tomcat in maven
Critical
3 months ago
Apache Tomcat - HTTP/2 request headers not validated
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
3 months ago
Apache Tomcat - WebSocket authentication header exposure
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
3 months ago
Apache Tomcat: LockOutRealm treats user names as case-sensitive
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
3 months ago
Apache Tomcat - AJP secret compared in non-constant time
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
3 months ago
Apache Tomcat - Digest authenticator will authenticate any unknown user
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Critical
3 months ago
Apache Tomcat - Security constraints not correctly applied
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
3 months ago
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
4 months ago
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
maven
org.apache.tomcat:tomcat
High
4 months ago
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File
maven
org.apache.tomcat:tomcat
High
4 months ago
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
maven
org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
Moderate
4 months ago
Apache Tomcat has an Open Redirect vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
High
4 months ago
Apache Tomcat: Configured cipher preference order not preserved
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Critical
4 months ago
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
maven
org.apache.tomcat:tomcat
High
4 months ago
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor
maven
org.apache.tomcat:tomcat
Moderate
4 months ago
Apache Tomcat has an Improper Input Validation vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
6 months ago
Apache Tomcat - Client certificate verification bypass
maven
org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
10 months ago
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
High
10 months ago
Apache Tomcat Vulnerable to Relative Path Traversal
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Low
10 months ago
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
Moderate
about 1 year ago
Apache Tomcat installer for Windows has an untrusted search path vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 1 year ago
Apache Tomcat Uncontrolled Resource Consumption vulnerability
maven
org.apache.tomcat:tomcat
Moderate
almost 3 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat
Moderate
almost 3 years ago
Apache Tomcat Incomplete Cleanup vulnerability
maven
org.apache.tomcat:tomcat
Moderate
almost 3 years ago
Apache Tomcat Open Redirect vulnerability
maven
org.apache.tomcat:tomcat
Moderate
about 4 years ago
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
maven
org.apache.tomcat:tomcat
High
about 4 years ago
Deserialization of Untrusted Data in Apache Tomcat
maven
org.apache.tomcat:tomcat
Low
about 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
about 4 years ago
Apache Tomcat Allows Replacing of XML Parser
maven
org.apache.tomcat:tomcat
Moderate
about 4 years ago
Apache Tomcat does not follow ServletSecurity annotations
maven
org.apache.tomcat:tomcat
Moderate
about 4 years ago
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
maven
org.apache.tomcat:tomcat
Moderate
about 4 years ago
Cross-Site Request Forgery in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat does not enforce the maxHttpHeaderSize limit
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat allows remote attackers to bypass intended access restrictions
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Verification of Source of a Communication Channel in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Use of Hard-coded Cryptographic Key in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Insertion of Sensitive Information into Log File in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
maven
org.apache.tomcat:tomcat
Low
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat is vulnerable to HTTP request-smuggling
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Denial of Service vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Integer Overflow or Wraparound in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Uncontrolled Resource Consumption in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Insufficient Verification of Data Authenticity in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Inconsistent documentation in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Handling of Exceptional Conditions in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Resource Shutdown or Release in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Unrestricted file upload vulnerability
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat vulnerable to SecurityManager bypass
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
System Property Disclosure in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Critical
over 4 years ago
Apache Tomcat affected by vulnerability in TLS and SSL protocol
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Directory Traversal vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Denial of Service via Malformed Request Headers
maven
org.apache.tomcat:tomcat