Red Hat Enterprise Linux 9/tomcat

Red Hat · Package

23 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
tomcat: Apache Tomcat: Denial of Service via WebSocket chat exampleCVE-2026-66299	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race conditionCVE-2026-65183	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraintsCVE-2026-66422	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Authenticated WebSocket session persists after HTTP session terminationCVE-2026-73180	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation ListsCVE-2026-73581	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfigurationCVE-2026-75973	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Authentication Bypass in WebSocket EndpointsCVE-2026-76183	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	High	No fix reported	Not recorded
tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of serviceCVE-2026-77756	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulationCVE-2026-77762	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Denial of Service via busy wait during WebSocket closeCVE-2026-77791	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	High	No fix reported	Not recorded
tomcat: Apache Tomcat: Denial of Service via AJP requestCVE-2026-78383	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	High	No fix reported	Not recorded
tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 requestCVE-2026-78437	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 6/tomcat6	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeoutsCVE-2026-79677	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledCVE-2026-86248	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: Apache Tomcat: HTTP/2 request smuggling due to header mix-upCVE-2026-86350	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	High	No fix reported	Not recorded
tomcat: Apache Tomcat: WebSocket message smuggling via improper length handlingCVE-2026-87022	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failureCVE-2026-74048	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)CVE-2026-74049	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: tomcat: Unauthorized socket access via TOCTOU race conditionCVE-2026-80353	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 8/pki-deps:10.6/pki-servlet-engine	Red Hat	Low	No fix reported	Not recorded
tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanupCVE-2026-88041	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded