All products

Red Hat JBoss Enterprise Web Server 2/tomcat6

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Tomcat Improper Access Control vulnerabilityCVE-2016-8735 · GHSA-CW54-59PW-4G8C org.apache.tomcat:tomcat-catalina-jmx-remoteorg.apache.tomcat:tomcat-catalina MavenRed Hat Critical Fix reported
Concurrent Execution using Shared Resource with Improper Synchronization in Apache TomcatCVE-2016-8745 · GHSA-W3J5-Q8F2-3CQQ org.apache.tomcat:tomcat-utilRed Hat JBoss Enterprise Web Server 2/tomcat6 MavenRed Hat High Fix reported
Improper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6 org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat Medium Fix reported
System Property Disclosure in Apache TomcatCVE-2016-6794 · GHSA-2RVF-329F-P99G org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat Medium Fix reported
Apache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796 · GHSA-3MJP-P938-4329 org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat High Fix reported
Authentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018 · GHSA-4V3G-G84W-HV7R org.apache.tomcat.embed:tomcat-embed-jasperorg.apache.tomcat:jasper MavenRed Hat Critical Fix reported
Apache Tomcat OS Command Injection vulnerabilityCVE-2019-0232 · GHSA-8VMX-QMCH-MPQG org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Web Server 2/tomcat6 MavenRed Hat High Fix reported
Incorrect Authorization in Apache TomcatCVE-2016-6797 · GHSA-Q6X7-F33R-3WXX org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat High Fix reported
Observable Discrepancy in Apache TomcatCVE-2016-0762 · GHSA-WXCP-F2C8-X6XV org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat Medium Fix reported
Improper Input Validation in Apache TomcatCVE-2016-6816 · GHSA-JC7P-5R39-9477 org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat High Fix reported
Insufficient Verification of Data Authenticity in Apache TomcatCVE-2017-7674 · GHSA-73RX-3F9R-X949 org.apache.tomcat:tomcatRed Hat JBoss Enterprise Web Server 2/tomcat6 MavenRed Hat Medium Fix reported
tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalationCVE-2016-1240 Red Hat JBoss Enterprise Web Server 2/tomcat6Red Hat JBoss Enterprise Web Server 2/tomcat7 Red Hat High No fix reported