All products

Red Hat OpenShift Application Runtimes/tomcat

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core MavenRed Hat High Fix reported
Apache Tomcat Improper Input Validation vulnerabilityCVE-2023-45648 · GHSA-R6J3-PX5G-CQ3X org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat Medium Fix reported
Apache Tomcat Incomplete Cleanup vulnerabilityCVE-2023-42795 · GHSA-G8PJ-R55Q-5C2V org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat Open Redirect vulnerabilityCVE-2023-41080 · GHSA-Q3MW-PVR8-9GGC org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Apache Tomcat Incomplete Cleanup vulnerabilityCVE-2023-42794 · GHSA-JM7M-8JH6-29HP org.apache.tomcat:tomcat-coyoteRed Hat AMQ Broker 7/tomcat MavenRed Hat Medium Fix reported
Apache Tomcat information exposure vulnerabilityCVE-2018-1305 · GHSA-JX6H-3FJX-CGV5 org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Web Server 2/tomcat7 MavenRed Hat Medium Fix reported
Apache Tomcat unauthorized access vulnerabilityCVE-2018-1304 · GHSA-6RXJ-58JH-436R org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported
The host name verification missing in Apache TomcatCVE-2018-8034 · GHSA-46J3-R4PJ-4835 org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Virtualization 6/jbossweb MavenRed Hat High Fix reported
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder CVE-2018-1336 · GHSA-M59C-JPC8-M2X4 org.apache.tomcat.embed:tomcat-embed-coreRed Hat AMQ Broker 7/tomcat MavenRed Hat High Fix reported
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014 · GHSA-R4X2-3CQ5-HQVP org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Application Platform 5/jbossweb MavenRed Hat Critical Fix reported
Apache Tomcat Race Condition vulnerabilityCVE-2018-8037 · GHSA-6V52-MJ5R-7J2M org.apache.tomcat.embed:tomcat-embed-coreRed Hat OpenShift Application Runtimes/tomcat MavenRed Hat Medium Fix reported
Apache Tomcat Open Redirect vulnerabilityCVE-2018-11784 · GHSA-5Q99-F34M-67GC org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported