Red Hat JBoss Web Server 6/jws6-tomcat

Red Hat · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
tomcat: Apache Tomcat: Cross-context authentication mix-up via Jakarta Authentication misconfigurationCVE-2026-75973	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Request smuggling vulnerability can lead to denial of serviceCVE-2026-77756	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Race condition allows HTTP/2 request manipulationCVE-2026-77762	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Denial of Service via malformed HTTP/2 requestCVE-2026-78437	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 6/tomcat6	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: WebSocket message smuggling via improper length handlingCVE-2026-87022	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failureCVE-2026-74048	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)CVE-2026-74049	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanupCVE-2026-88041	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Low	No fix reported	Not recorded
tomcat: Apache Tomcat: Possible TLS 1.3 connection failuresCVE-2026-93446	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	Medium	No fix reported	Not recorded
tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realmCVE-2026-101296	Red Hat Enterprise Linux 10/tomcat9 Red Hat Enterprise Linux 10/tomcat	Red Hat	High	No fix reported	Not recorded