Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Web Server 2/tomcat6
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Tomcat Improper Access Control vulnerability
CVE-2016-8735 · GHSA-CW54-59PW-4G8C
org.apache.tomcat:tomcat-catalina-jmx-remote
org.apache.tomcat:tomcat-catalina
Maven
Red Hat
Critical
Fix reported
2025-10-22
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
CVE-2016-8745 · GHSA-W3J5-Q8F2-3CQQ
org.apache.tomcat:tomcat-util
Red Hat JBoss Enterprise Web Server 2/tomcat6
Maven
Red Hat
High
Fix reported
2025-09-03
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
CVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6
org.apache.tomcat:tomcat
Red Hat JBoss BRMS 5/jbossweb
Maven
Red Hat
Medium
Fix reported
2025-08-29
System Property Disclosure in Apache Tomcat
CVE-2016-6794 · GHSA-2RVF-329F-P99G
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-11-28
Apache Tomcat vulnerable to SecurityManager bypass
CVE-2016-6796 · GHSA-3MJP-P938-4329
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-11-28
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
CVE-2016-5018 · GHSA-4V3G-G84W-HV7R
org.apache.tomcat.embed:tomcat-embed-jasper
org.apache.tomcat:jasper
Maven
Red Hat
Critical
Fix reported
2024-04-18
Apache Tomcat OS Command Injection vulnerability
CVE-2019-0232 · GHSA-8VMX-QMCH-MPQG
org.apache.tomcat.embed:tomcat-embed-core
Red Hat JBoss Enterprise Web Server 2/tomcat6
Maven
Red Hat
High
Fix reported
2024-03-16
Incorrect Authorization in Apache Tomcat
CVE-2016-6797 · GHSA-Q6X7-F33R-3WXX
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-13
Observable Discrepancy in Apache Tomcat
CVE-2016-0762 · GHSA-WXCP-F2C8-X6XV
org.apache.tomcat:tomcat
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
Medium
Fix reported
2024-03-11
Improper Input Validation in Apache Tomcat
CVE-2016-6816 · GHSA-JC7P-5R39-9477
org.apache.tomcat:tomcat-coyote
Red Hat Enterprise Linux 5/tomcat5
Maven
Red Hat
High
Fix reported
2024-03-11
Insufficient Verification of Data Authenticity in Apache Tomcat
CVE-2017-7674 · GHSA-73RX-3F9R-X949
org.apache.tomcat:tomcat
Red Hat JBoss Enterprise Web Server 2/tomcat6
Maven
Red Hat
Medium
Fix reported
2024-03-11
tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation
CVE-2016-1240
Red Hat JBoss Enterprise Web Server 2/tomcat6
Red Hat JBoss Enterprise Web Server 2/tomcat7
Red Hat
High
No fix reported
Not recorded