| Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerabilityCVE-2026-53404 · GHSA-H792-V28V-PPGR |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat has an Improper Authorization vulnerabilityCVE-2026-55956 · GHSA-5V3H-FJV2-54FG |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat has a Missing Critical Step in Authentication vulnerabilityCVE-2026-55957 · GHSA-7895-GFFQ-W6JQ |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat Improper Input Validation vulnerabilityCVE-2023-46589 · GHSA-FCCV-JMMP-QG76 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerabilityCVE-2026-68525 · GHSA-H3X4-894J-XPX5 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerabilityCVE-2026-65905 · GHSA-9XV2-5V5Q-P794 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerabilityCVE-2026-65182 · GHSA-GCX9-497G-6CP6 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Potential remote code execution in Apache TomcatCVE-2020-9484 · GHSA-344F-F5VG-2JFJ |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C |
commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat Session Fixation vulnerabilityCVE-2025-55668 · GHSA-23HV-MWM6-G8JF |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Cross-site scripting in Apache TomcatCVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat Incomplete Cleanup vulnerabilityCVE-2023-42795 · GHSA-G8PJ-R55Q-5C2V |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat Open Redirect vulnerabilityCVE-2023-41080 · GHSA-Q3MW-PVR8-9GGC |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat - Security constraints not correctly appliedCVE-2026-43515 · GHSA-5M62-PW8W-7W9F |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat - AJP secret compared in non-constant timeCVE-2026-43514 · GHSA-9M89-8FRQ-C98C |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Apache Tomcat - Digest authenticator will authenticate any unknown userCVE-2026-43512 · GHSA-H6FC-48RJ-7QQH |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat: LockOutRealm treats user names as case-sensitiveCVE-2026-43513 · GHSA-5MP6-JRQ3-R938 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat - WebSocket authentication header exposureCVE-2026-42498 · GHSA-FV25-8XCX-GQJC |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handlingCVE-2026-41284 · GHSA-GX5V-XP9W-J4CG |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat Vulnerable to Improper Resource Shutdown or ReleaseCVE-2025-61795 · GHSA-HGRR-935X-PQ79 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
