Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Application Runtimes/tomcat
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Commons FileUpload denial of service vulnerability
CVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C
commons-fileupload:commons-fileupload
org.apache.tomcat.embed:tomcat-embed-core
Maven
Red Hat
High
Fix reported
2026-08-07
Apache Tomcat Improper Input Validation vulnerability
CVE-2023-45648 · GHSA-R6J3-PX5G-CQ3X
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-coyote
Maven
Red Hat
Medium
Fix reported
2026-06-12
Apache Tomcat Incomplete Cleanup vulnerability
CVE-2023-42795 · GHSA-G8PJ-R55Q-5C2V
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Medium
Fix reported
2026-06-12
Apache Tomcat Open Redirect vulnerability
CVE-2023-41080 · GHSA-Q3MW-PVR8-9GGC
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Medium
Fix reported
2026-06-05
Apache Tomcat Incomplete Cleanup vulnerability
CVE-2023-42794 · GHSA-JM7M-8JH6-29HP
org.apache.tomcat:tomcat-coyote
Red Hat AMQ Broker 7/tomcat
Maven
Red Hat
Medium
Fix reported
2025-02-13
Apache Tomcat information exposure vulnerability
CVE-2018-1305 · GHSA-JX6H-3FJX-CGV5
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Enterprise Web Server 2/tomcat7
Maven
Red Hat
Medium
Fix reported
2024-11-29
Apache Tomcat unauthorized access vulnerability
CVE-2018-1304 · GHSA-6RXJ-58JH-436R
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-11-29
The host name verification missing in Apache Tomcat
CVE-2018-8034 · GHSA-46J3-R4PJ-4835
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Data Virtualization 6/jbossweb
Maven
Red Hat
High
Fix reported
2024-10-21
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
CVE-2018-1336 · GHSA-M59C-JPC8-M2X4
org.apache.tomcat.embed:tomcat-embed-core
Red Hat AMQ Broker 7/tomcat
Maven
Red Hat
High
Fix reported
2024-03-12
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
CVE-2018-8014 · GHSA-R4X2-3CQ5-HQVP
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Enterprise Application Platform 5/jbossweb
Maven
Red Hat
Critical
Fix reported
2024-03-12
Apache Tomcat Race Condition vulnerability
CVE-2018-8037 · GHSA-6V52-MJ5R-7J2M
org.apache.tomcat.embed:tomcat-embed-core
Red Hat OpenShift Application Runtimes/tomcat
Maven
Red Hat
Medium
Fix reported
2024-03-11
Apache Tomcat Open Redirect vulnerability
CVE-2018-11784 · GHSA-5Q99-F34M-67GC
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-11