Security
فارسی
All products

Red Hat JBoss Web Server 5/jws5-tomcat

Red Hat · Package
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Tomcat has a Cross-site Scripting vulnerabilityCVE-2026-50229 · GHSA-PG42-RG8C-J886 org.apache.tomcat:tomcatRed Hat Enterprise Linux 10/tomcat MavenRed Hat Medium Fix reported
Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerabilityCVE-2026-53404 · GHSA-H792-V28V-PPGR org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerabilityCVE-2026-55276 · GHSA-MQG3-R7H5-24X4 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-util-scan MavenRed Hat Critical Fix reported
Apache Tomcat has an Improper Authentication vulnerabilityCVE-2026-55955 · GHSA-C5PH-RGHF-FJFJ org.apache.tomcat:tomcat-tribesorg.apache.tomcat:tomcat MavenRed Hat Medium Fix reported
Apache Tomcat has an Improper Authorization vulnerabilityCVE-2026-55956 · GHSA-5V3H-FJV2-54FG org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat has a Missing Critical Step in Authentication vulnerabilityCVE-2026-55957 · GHSA-7895-GFFQ-W6JQ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat util accepted misconfigured CRLsCVE-2026-53434 · GHSA-4X29-79GH-6V8Q org.apache.tomcat:tomcat-utilRed Hat Enterprise Linux 10/tomcat MavenRed Hat Critical Fix reported
Apache Tomcat - HTTP/2 request headers not validatedCVE-2026-41293 · GHSA-R29C-68GH-XP6X org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Critical Fix reported
tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valveCVE-2026-59083 Red Hat Enterprise Linux 10/tomcatRed Hat Enterprise Linux 6/tomcat6 Red Hat Low No fix reported
tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurationsCVE-2026-59084 Red Hat Enterprise Linux 10/tomcatRed Hat Enterprise Linux 6/tomcat6 Red Hat Low No fix reported
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation ListsCVE-2026-73581 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfigurationCVE-2026-75973 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Authentication Bypass in WebSocket EndpointsCVE-2026-76183 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of serviceCVE-2026-77756 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulationCVE-2026-77762 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Low No fix reported
tomcat: Apache Tomcat: Denial of Service via busy wait during WebSocket closeCVE-2026-77791 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Denial of Service via AJP requestCVE-2026-78383 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported
tomcat: Apache Tomcat: Denial of Service due to lost asynchronous WebSocket write timeoutsCVE-2026-79677 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledCVE-2026-86248 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat Medium No fix reported
tomcat: Apache Tomcat: HTTP/2 request smuggling due to header mix-upCVE-2026-86350 Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat Red Hat High No fix reported