org.apache.tomcat:tomcat-catalina
Tomcat Servlet Engine Core Classes and Standard implementations
Security Advisories for org.apache.tomcat:tomcat-catalina in maven
Critical
16 days ago
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Critical
16 days ago
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Critical
4 months ago
Apache Tomcat - Security constraints not correctly applied
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
4 months ago
Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
4 months ago
Apache Tomcat - WebSocket authentication header exposure
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
4 months ago
Apache Tomcat - AJP secret compared in non-constant time
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
4 months ago
Apache Tomcat: LockOutRealm treats user names as case-sensitive
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
5 months ago
Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
Moderate
5 months ago
Apache Tomcat has an Open Redirect vulnerability
maven
org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina
High
11 months ago
Apache Tomcat Vulnerable to Relative Path Traversal
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Low
11 months ago
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
Low
11 months ago
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
about 1 year ago
Apache Tomcat Session Fixation vulnerability
maven
org.apache.tomcat:tomcat-catalina
High
about 1 year ago
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
maven
org.apache.tomcat:tomcat-catalina
High
about 1 year ago
Apache Tomcat - DoS in multipart upload
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
about 1 year ago
Apache Tomcat - Security constraint bypass for pre/post-resources
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
about 1 year ago
Apache Tomcat installer for Windows has an untrusted search path vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Low
over 1 year ago
Apache Tomcat - CGI security constraint bypass
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Critical
over 1 year ago
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
maven
org.apache.tomcat:tomcat-catalina
High
over 1 year ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat:tomcat-catalina
High
over 1 year ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat:tomcat-catalina
Critical
almost 2 years ago
Apache Tomcat - Authentication Bypass
maven
org.apache.tomcat:tomcat-catalina
High
almost 3 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat-catalina
Moderate
over 3 years ago
Apache Tomcat vulnerable to Unprotected Transport of Credentials
maven
org.apache.tomcat:tomcat-catalina
High
over 3 years ago
Apache Tomcat improperly escapes input from JsonErrorReportValve
maven
org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 4 years ago
Improper Authentication in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Unrestricted Upload of File with Dangerous Type Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Critical
over 4 years ago
Exposure of Resource to Wrong Sphere in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Improper Access Control in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina
Critical
over 4 years ago
Apache Tomcat Improper Access Control vulnerability
maven
org.apache.tomcat:tomcat-catalina
High
over 6 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina