Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss BRMS 5/jbossweb
Red Hat
· Package
21 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Cross-site scripting in Apache Tomcat
CVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Medium
Fix reported
2026-06-19
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5345 · GHSA-RH8Q-VJGF-GF74
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Authentication in Apache Tomcat
CVE-2012-5886 · GHSA-9XRJ-439H-62HG
org.apache.tomcat:tomcat-catalina
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-11-29
System Property Disclosure in Apache Tomcat
CVE-2016-6794 · GHSA-2RVF-329F-P99G
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-11-28
Apache Tomcat vulnerable to SecurityManager bypass
CVE-2016-6796 · GHSA-3MJP-P938-4329
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-11-28
Exposure of Resource to Wrong Sphere in Apache Tomcat
CVE-2017-5648 · GHSA-3VX3-XF6Q-R5XP
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Critical
Fix reported
2024-04-18
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
CVE-2016-5018 · GHSA-4V3G-G84W-HV7R
org.apache.tomcat.embed:tomcat-embed-jasper
org.apache.tomcat:jasper
Maven
Red Hat
Critical
Fix reported
2024-04-18
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2017-5647 · GHSA-3GV7-3H64-78CM
org.apache.tomcat:tomcat
Red Hat Fuse 7/cxf
Maven
Red Hat
High
Fix reported
2024-03-19
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2016-0706 · GHSA-6VX3-HR43-CFRH
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-16
Incorrect Authorization in Apache Tomcat
CVE-2016-6797 · GHSA-Q6X7-F33R-3WXX
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-13
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · GHSA-WXCP-F2C8-X6XV
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-03-11
Improper Verification of Source of a Communication Channel in Apache Tomcat
CVE-2016-0763 · GHSA-9HJV-9H75-XMPP
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-11
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
CVE-2015-5346 · GHSA-JRCP-C39H-R29X
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-11
Improper Access Control in Apache Tomcat
CVE-2016-0714 · GHSA-MV42-PX54-87JW
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-10
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
CVE-2015-5351 · GHSA-W7CG-5969-678W
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-02-18
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
CVE-2018-1067 · GHSA-47MP-RQ2X-WJF2
org.jboss.eap:wildfly-undertow
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2023-11-08
Improper Access Control in Apache Tomcat
CVE-2012-5885 · GHSA-99RF-92V6-CWX4
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2023-11-08
Improper Authentication in Apache Tomcat
CVE-2012-5887 · GHSA-28CQ-6RMX-PJQ4
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2023-11-08
Authentication Bypass in Apache Tomcat
CVE-2012-3546 · GHSA-JGM2-M5CG-F66G
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2023-11-08
Previous
1
2
Next