All products

Red Hat JBoss Fuse 6/tomcat

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infinite Loop in Apache TomcatCVE-2020-13935 · GHSA-M7JV-HQ7H-MQ7C org.apache.tomcat.embed:tomcat-embed-websocketorg.apache.tomcat:tomcat-websocket MavenRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2021-25122 · GHSA-J39C-C8HJ-X4J3 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat High Fix reported
Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core MavenRed Hat High Fix reported
Cross-site scripting in Apache TomcatCVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in Apache TomcatCVE-2020-11996 · GHSA-53HP-JPWQ-2JGQ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat High Fix reported
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934 · GHSA-VF77-8H7G-GGHP org.apache.tomcat:tomcat-coyoteorg.apache.tomcat:tomcat MavenRed Hat High Fix reported
The host name verification missing in Apache TomcatCVE-2018-8034 · GHSA-46J3-R4PJ-4835 org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Virtualization 6/jbossweb MavenRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-17527 · GHSA-VVW4-RFWF-P6HX org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 8/pki-deps:10.6/pki-servlet-engine MavenRed Hat High Fix reported
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder CVE-2018-1336 · GHSA-M59C-JPC8-M2X4 org.apache.tomcat.embed:tomcat-embed-coreRed Hat AMQ Broker 7/tomcat MavenRed Hat High Fix reported
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource ConsumptionCVE-2022-29885 · GHSA-R84P-88G2-2VX2 org.apache.tomcat:tomcatRed Hat Decision Manager 7/tomcat MavenRed Hat High Fix reported
Missing Release of Resource after Effective Lifetime in Apache TomcatCVE-2021-42340 · GHSA-WPH7-X527-W3H5 org.apache.tomcat:tomcatRed Hat JBoss Fuse 6/tomcat MavenRed Hat High Fix reported
Information Disclosure in Apache TomcatCVE-2021-24122 · GHSA-2RVV-W9R2-RG7M org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported
Apache Tomcat Open Redirect vulnerabilityCVE-2018-11784 · GHSA-5Q99-F34M-67GC org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported
Potential HTTP request smuggling in Apache TomcatCVE-2019-17569 · GHSA-767J-JFH2-JVRC org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943 · GHSA-F268-65QC-98VG org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat Medium Fix reported
Authentication Bypass by Alternate Name in Apache TomcatCVE-2021-30640 · GHSA-36QH-35CM-5W2W org.apache.tomcat:tomcatRed Hat JBoss Fuse 6/tomcat MavenRed Hat Medium Fix reported
Potential remote code execution in Apache TomcatCVE-2021-25329 · GHSA-JGWR-3QM3-26F3 org.apache.tomcat.embed:tomcat-embed-coreRed Hat Enterprise Linux 6/tomcat6 MavenRed Hat High Fix reported
Potential HTTP request smuggling in Apache TomcatCVE-2020-1935 · GHSA-QXF4-CHVG-4R8R org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat Medium Fix reported
Race condition in Apache TomcatCVE-2022-23181 · GHSA-9F3J-PM6F-9FM5 org.apache.tomcat:tomcatRed Hat Enterprise Linux 6/tomcat6 MavenRed Hat High Fix reported
Infinite loop in Tomcat due to parsing errorCVE-2021-41079 · GHSA-59G9-7GFX-C72P org.apache.tomcat:tomcatRed Hat Enterprise Linux 8/pki-deps:10.6/pki-servlet-engine MavenRed Hat High Fix reported