Security
فارسی
All products

org.apache.tomcat:tomcat

Maven · Package
168 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Tomcat has a Cross-site Scripting vulnerabilityCVE-2026-50229 · GHSA-PG42-RG8C-J886 org.apache.tomcat:tomcatRed Hat Enterprise Linux 10/tomcat MavenRed Hat Medium Fix reported
Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerabilityCVE-2026-53404 · GHSA-H792-V28V-PPGR org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerabilityCVE-2026-55276 · GHSA-MQG3-R7H5-24X4 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-util-scan MavenRed Hat Critical Fix reported
Apache Tomcat has an Improper Authentication vulnerabilityCVE-2026-55955 · GHSA-C5PH-RGHF-FJFJ org.apache.tomcat:tomcat-tribesorg.apache.tomcat:tomcat MavenRed Hat Medium Fix reported
Apache Tomcat has an Improper Authorization vulnerabilityCVE-2026-55956 · GHSA-5V3H-FJV2-54FG org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat has a Missing Critical Step in Authentication vulnerabilityCVE-2026-55957 · GHSA-7895-GFFQ-W6JQ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat Directory TraversalCVE-2007-0450 · GHSA-4PRH-GQW8-RGH5 org.apache.tomcat:tomcat Maven Medium Fix reported
Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerabilityCVE-2026-68525 · GHSA-H3X4-894J-XPX5 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerabilityCVE-2026-65905 · GHSA-9XV2-5V5Q-P794 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerabilityCVE-2026-65182 · GHSA-GCX9-497G-6CP6 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat - Client certificate verification bypassCVE-2025-66614 · GHSA-FPJ8-GQ4V-P354 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Medium Fix reported
Apache Tomcat - HTTP/2 request headers not validatedCVE-2026-41293 · GHSA-R29C-68GH-XP6X org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Critical Fix reported
Infinite Loop in Apache TomcatCVE-2020-13935 · GHSA-M7JV-HQ7H-MQ7C org.apache.tomcat.embed:tomcat-embed-websocketorg.apache.tomcat:tomcat-websocket MavenRed Hat High Fix reported
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log FileCVE-2026-34487 · GHSA-X4M4-345F-5H5G org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-tribes MavenRed Hat High Fix reported
Apache Tomcat Uncontrolled Resource Consumption vulnerabilityCVE-2024-54677 · GHSA-653P-VG55-5652 org.apache.tomcat:tomcatRed Hat Enterprise Linux 6/tomcat6 MavenRed Hat Medium Fix reported
Cross-site scripting in Apache TomcatCVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat - XSS in generated JSPsCVE-2024-52318 · GHSA-F632-9449-3J4W org.apache.tomcat.embed:tomcat-embed-jasperorg.apache.tomcat:tomcat-jasper Maven Medium Fix reported
Apache Tomcat Improper Input Validation vulnerabilityCVE-2023-45648 · GHSA-R6J3-PX5G-CQ3X org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Medium Fix reported
Apache Tomcat Incomplete Cleanup vulnerabilityCVE-2023-42795 · GHSA-G8PJ-R55Q-5C2V org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in Apache TomcatCVE-2020-11996 · GHSA-53HP-JPWQ-2JGQ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat High Fix reported