Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Operations Network 3/jbossweb
Red Hat
· Package
26 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Cross-site scripting in Apache Tomcat
CVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W
org.apache.tomcat.embed:tomcat-embed-core
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Medium
Fix reported
2026-06-19
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5345 · GHSA-RH8Q-VJGF-GF74
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
CVE-2014-0099 · GHSA-XH5X-J8JF-PCPX
org.apache.tomcat:tomcat-util
org.apache.tomcat:tomcat
Maven
Red Hat
Medium
Fix reported
2025-04-15
Missing XML Validation in Apache Tomcat
CVE-2014-0119 · GHSA-PRC3-7F44-W48J
org.apache.tomcat:tomcat-catalina
org.apache.tomcat:tomcat-jasper
Maven
Red Hat
Medium
Fix reported
2025-04-15
Integer Overflow or Wraparound in Apache Tomcat
CVE-2014-0075 · GHSA-475F-74WP-PQV5
org.apache.tomcat:tomcat-coyote
org.apache.tomcat:tomcat
Maven
Red Hat
Medium
Fix reported
2025-04-15
Improper Input Validation in Apache Tomcat
CVE-2014-0227 · GHSA-42J3-498Q-M6VP
org.apache.tomcat:tomcat
Red Hat BPM Suite 6/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-12-08
Uncontrolled Resource Consumption in Apache Tomcat
CVE-2014-0230 · GHSA-PXCX-CXQ8-4MMW
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-12-07
Apache Tomcat is vulnerable to HTTP request-smuggling
CVE-2013-4286 · GHSA-J448-J653-R3VJ
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-12-07
Commons FileUpload Denial of service vulnerability
CVE-2014-0050 · GHSA-XX68-JFCG-XMMF
commons-fileupload:commons-fileupload
org.apache.tomcat:tomcat
Maven
Red Hat
High
Fix reported
2024-12-02
System Property Disclosure in Apache Tomcat
CVE-2016-6794 · GHSA-2RVF-329F-P99G
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-11-28
Apache Tomcat vulnerable to SecurityManager bypass
CVE-2016-6796 · GHSA-3MJP-P938-4329
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-11-28
The host name verification missing in Apache Tomcat
CVE-2018-8034 · GHSA-46J3-R4PJ-4835
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Data Virtualization 6/jbossweb
Maven
Red Hat
High
Fix reported
2024-10-21
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
CVE-2016-5018 · GHSA-4V3G-G84W-HV7R
org.apache.tomcat.embed:tomcat-embed-jasper
org.apache.tomcat:jasper
Maven
Red Hat
Critical
Fix reported
2024-04-18
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
CVE-2016-0706 · GHSA-6VX3-HR43-CFRH
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-16
High severity vulnerability that affects commons-fileupload:commons-fileupload
CVE-2016-3092 · GHSA-FVM3-CFVJ-GXQQ
commons-fileupload:commons-fileupload
Red Hat JBoss Data Grid 6/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-16
Incorrect Authorization in Apache Tomcat
CVE-2016-6797 · GHSA-Q6X7-F33R-3WXX
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-13
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · GHSA-WXCP-F2C8-X6XV
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-03-11
Improper Handling of Exceptional Conditions in Apache Tomcat
CVE-2017-5664 · GHSA-JMVV-524F-HJ5J
org.apache.tomcat:tomcat
Red Hat JBoss Enterprise Application Platform 5/jbossweb
Maven
Red Hat
High
Fix reported
2024-03-11
Improper Verification of Source of a Communication Channel in Apache Tomcat
CVE-2016-0763 · GHSA-9HJV-9H75-XMPP
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2024-03-11
Previous
1
2
Next