Security
فارسی
All products

Red Hat Enterprise Linux 10/tomcat9

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validationCVE-2026-65637 · GHSA-F525-44XV-F2QJ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Critical Fix reported
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerabilityCVE-2026-68525 · GHSA-H3X4-894J-XPX5 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerabilityCVE-2026-65905 · GHSA-9XV2-5V5Q-P794 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerabilityCVE-2026-65182 · GHSA-GCX9-497G-6CP6 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
tomcat: Apache Tomcat: Denial of Service via WebSocket chat exampleCVE-2026-66299 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race conditionCVE-2026-65183 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processingCVE-2026-65927 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraintsCVE-2026-66422 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Improper Authentication due to principal lookup failureCVE-2026-68569 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Denial of Service via HTTP/2 allocation leakCVE-2026-68763 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Authenticated WebSocket session persists after HTTP session terminationCVE-2026-73180 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation ListsCVE-2026-73581 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfigurationCVE-2026-75973 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Authentication Bypass in WebSocket EndpointsCVE-2026-76183 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of serviceCVE-2026-77756 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulationCVE-2026-77762 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Denial of Service via busy wait during WebSocket closeCVE-2026-77791 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Denial of Service via AJP requestCVE-2026-78383 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 requestCVE-2026-78437 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 6/tomcat6 Red Hat Low No fix reported
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeoutsCVE-2026-79677 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported