| Apache Tomcat has an Improper Input Validation vulnerabilityCVE-2026-24734 · GHSA-MGP5-RV84-W37Q |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote-ffm |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validationCVE-2026-65637 · GHSA-F525-44XV-F2QJ |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerabilityCVE-2026-68525 · GHSA-H3X4-894J-XPX5 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerabilityCVE-2026-65905 · GHSA-9XV2-5V5Q-P794 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerabilityCVE-2026-65182 · GHSA-GCX9-497G-6CP6 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat - Client certificate verification bypassCVE-2025-66614 · GHSA-FPJ8-GQ4V-P354 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat - HTTP/2 request headers not validatedCVE-2026-41293 · GHSA-R29C-68GH-XP6X |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat - Security constraint bypass with HTTP/0.9CVE-2026-24733 · GHSA-QQ5R-98HH-RXC9 |
org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 10/tomcat |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Apache Tomcat: CLIENT_CERT authentication does not fail as expectedCVE-2026-29145 · GHSA-95JQ-RWVF-VJX4 |
org.apache.tomcat:tomcat-coyote-ffmorg.apache.tomcat:tomcat |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat has an HTTP Request/Response Smuggling vulnerabilityCVE-2026-24880 · GHSA-563X-Q5RQ-57QP |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat: CLIENT_CERT authentication does not fail as expectedCVE-2026-34500 · GHSA-24J9-X2WG-9QV6 |
org.apache.tomcat:tomcat-coyote-ffmRed Hat Enterprise Linux 10/tomcat |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat has an Improper Input Validation vulnerabilityCVE-2026-32990 · GHSA-8MC5-53M5-3QJ2 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptorCVE-2026-29146 · GHSA-H468-7PVH-8VR8 |
org.apache.tomcat:tomcat-tribesorg.apache.tomcat:tomcat |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat has an Open Redirect vulnerabilityCVE-2026-25854 · GHSA-9M3C-QCXR-9X87 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat - CGI security constraint bypassCVE-2025-46701 · GHSA-H2FW-RFH5-95R3 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Apache Tomcat - Authentication BypassCVE-2024-52316 · GHSA-XCPR-7MR4-H4XQ |
org.apache.tomcat:tomcat-catalinaRed Hat Enterprise Linux 8/pki-deps:10.6/pki-servlet-engine |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource ConsumptionCVE-2022-29885 · GHSA-R84P-88G2-2VX2 |
org.apache.tomcat:tomcatRed Hat Decision Manager 7/tomcat |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race conditionCVE-2026-65183 |
Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processingCVE-2026-65927 |
Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| tomcat: Apache Tomcat: Improper Authorization allows bypass of declarative role constraintsCVE-2026-66422 |
Red Hat Enterprise Linux 10/tomcat9Red Hat Enterprise Linux 10/tomcat |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
