Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Web Server 3/tomcat8
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Commons FileUpload denial of service vulnerability
CVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C
commons-fileupload:commons-fileupload
org.apache.tomcat.embed:tomcat-embed-core
Maven
Red Hat
High
Fix reported
2026-08-07
Apache Tomcat vulnerable to Unprotected Transport of Credentials
CVE-2023-28708 · GHSA-2C9M-W27F-53RM
org.apache.tomcat:tomcat-catalina
Red Hat Enterprise Linux 6/tomcat6
Maven
Red Hat
Medium
Fix reported
2025-11-05
Apache Tomcat Improper Access Control vulnerability
CVE-2016-8735 · GHSA-CW54-59PW-4G8C
org.apache.tomcat:tomcat-catalina-jmx-remote
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Critical
Fix reported
2025-10-22
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
CVE-2023-28709 · GHSA-CX6H-86XW-9X34
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-coyote
Maven
Red Hat
High
Fix reported
2024-04-24
Apache Tomcat improperly escapes input from JsonErrorReportValve
CVE-2022-45143 · GHSA-RQ2W-37H9-VG94
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
High
Fix reported
2024-04-24
Apache Tomcat may reject request containing invalid Content-Length header
CVE-2022-42252 · GHSA-P22X-G9PX-3945
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-coyote
Maven
Red Hat
High
Fix reported
2024-04-24
Exposure of Resource to Wrong Sphere in Apache Tomcat
CVE-2017-5648 · GHSA-3VX3-XF6Q-R5XP
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Critical
Fix reported
2024-04-18
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2017-5647 · GHSA-3GV7-3H64-78CM
org.apache.tomcat:tomcat
Red Hat Fuse 7/cxf
Maven
Red Hat
High
Fix reported
2024-03-19
Improper Input Validation in Apache Tomcat
CVE-2016-6816 · GHSA-JC7P-5R39-9477
org.apache.tomcat:tomcat-coyote
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-11
Cross-site Scripting in Apache Tomcat
CVE-2022-34305 · GHSA-6J88-6WHG-X687
org.apache.tomcat:tomcat
Red Hat Fuse 7/tomcat
Maven
Red Hat
Medium
Fix reported
2023-01-27
tomcat: Infinite loop in the processing of https requests
CVE-2017-6056
Red Hat JBoss Operations Network 3/CoreServer
Red Hat JBoss Web Server 3/tomcat7
Red Hat
High
No fix reported
Not recorded
tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation
CVE-2016-1240
Red Hat JBoss Enterprise Web Server 2/tomcat6
Red Hat JBoss Enterprise Web Server 2/tomcat7
Red Hat
High
No fix reported
Not recorded
jss: Memory leak on TLS connections
CVE-2022-4132
Red Hat Enterprise Linux 6/jss
Red Hat Enterprise Linux 6/tomcatjss
Red Hat
Low
No fix reported
Not recorded