All products

Red Hat JBoss Web Server 3/tomcat8

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core MavenRed Hat High Fix reported
Apache Tomcat vulnerable to Unprotected Transport of CredentialsCVE-2023-28708 · GHSA-2C9M-W27F-53RM org.apache.tomcat:tomcat-catalinaRed Hat Enterprise Linux 6/tomcat6 MavenRed Hat Medium Fix reported
Apache Tomcat Improper Access Control vulnerabilityCVE-2016-8735 · GHSA-CW54-59PW-4G8C org.apache.tomcat:tomcat-catalina-jmx-remoteorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Apache Tomcat - Fix for CVE-2023-24998 was incompleteCVE-2023-28709 · GHSA-CX6H-86XW-9X34 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat High Fix reported
Apache Tomcat improperly escapes input from JsonErrorReportValveCVE-2022-45143 · GHSA-RQ2W-37H9-VG94 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat High Fix reported
Apache Tomcat may reject request containing invalid Content-Length headerCVE-2022-42252 · GHSA-P22X-G9PX-3945 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat High Fix reported
Exposure of Resource to Wrong Sphere in Apache TomcatCVE-2017-5648 · GHSA-3VX3-XF6Q-R5XP org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-5647 · GHSA-3GV7-3H64-78CM org.apache.tomcat:tomcatRed Hat Fuse 7/cxf MavenRed Hat High Fix reported
Improper Input Validation in Apache TomcatCVE-2016-6816 · GHSA-JC7P-5R39-9477 org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat High Fix reported
Cross-site Scripting in Apache TomcatCVE-2022-34305 · GHSA-6J88-6WHG-X687 org.apache.tomcat:tomcatRed Hat Fuse 7/tomcat MavenRed Hat Medium Fix reported
tomcat: Infinite loop in the processing of https requestsCVE-2017-6056 Red Hat JBoss Operations Network 3/CoreServerRed Hat JBoss Web Server 3/tomcat7 Red Hat High No fix reported
tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalationCVE-2016-1240 Red Hat JBoss Enterprise Web Server 2/tomcat6Red Hat JBoss Enterprise Web Server 2/tomcat7 Red Hat High No fix reported
jss: Memory leak on TLS connectionsCVE-2022-4132 Red Hat Enterprise Linux 6/jssRed Hat Enterprise Linux 6/tomcatjss Red Hat Low No fix reported