| In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563 · GHSA-9XCJ-C8CR-8C3C |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat BPM Suite 6/tomcat |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617 · GHSA-XJGH-84HX-56C5 |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Privilege Management in TomcatCVE-2020-1938 · GHSA-C9HW-WF7X-JP9J |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Improper Neutralization of CRLF Sequences in HTTP Headers in Apache TomcatCVE-2014-0099 · GHSA-XH5X-J8JF-PCPX |
org.apache.tomcat:tomcat-utilorg.apache.tomcat:tomcat |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Missing XML Validation in Apache TomcatCVE-2014-0119 · GHSA-PRC3-7F44-W48J |
org.apache.tomcat:tomcat-catalinaorg.apache.tomcat:tomcat-jasper |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Input Validation in Apache TomcatCVE-2014-0096 · GHSA-QPRX-Q2R7-3RX6 |
org.apache.tomcat:tomcat-catalinaorg.apache.tomcat:tomcat |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Integer Overflow or Wraparound in Apache TomcatCVE-2014-0075 · GHSA-475F-74WP-PQV5 |
org.apache.tomcat:tomcat-coyoteorg.apache.tomcat:tomcat |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Input Validation in Apache TomcatCVE-2014-0227 · GHSA-42J3-498Q-M6VP |
org.apache.tomcat:tomcatRed Hat BPM Suite 6/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Uncontrolled Resource Consumption in Apache TomcatCVE-2014-0230 · GHSA-PXCX-CXQ8-4MMW |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat is vulnerable to HTTP request-smugglingCVE-2013-4286 · GHSA-J448-J653-R3VJ |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat Denial of Service vulnerabilityCVE-2013-4322 · GHSA-WQ2P-Q66W-Q8GP |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-4590 · GHSA-87W9-X2C3-HRJJ |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| System Property Disclosure in Apache TomcatCVE-2016-6794 · GHSA-2RVF-329F-P99G |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796 · GHSA-3MJP-P938-4329 |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Authentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018 · GHSA-4V3G-G84W-HV7R |
org.apache.tomcat.embed:tomcat-embed-jasperorg.apache.tomcat:jasper |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Incorrect Authorization in Apache TomcatCVE-2016-6797 · GHSA-Q6X7-F33R-3WXX |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Observable Discrepancy in Apache TomcatCVE-2016-0762 · GHSA-WXCP-F2C8-X6XV |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Input Validation in Apache TomcatCVE-2016-6816 · GHSA-JC7P-5R39-9477 |
org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2010-1157 · GHSA-W6Q7-WW2X-7GM3 |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943 · GHSA-F268-65QC-98VG |
org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
