| Improper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345 · GHSA-RH8Q-VJGF-GF74 |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174 · GHSA-6QR6-X7JM-X2Q6 |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Input Validation in Apache TomcatCVE-2014-0227 · GHSA-42J3-498Q-M6VP |
org.apache.tomcat:tomcatRed Hat BPM Suite 6/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| System Property Disclosure in Apache TomcatCVE-2016-6794 · GHSA-2RVF-329F-P99G |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796 · GHSA-3MJP-P938-4329 |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| The host name verification missing in Apache TomcatCVE-2018-8034 · GHSA-46J3-R4PJ-4835 |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Virtualization 6/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Exposure of Resource to Wrong Sphere in Apache TomcatCVE-2017-5648 · GHSA-3VX3-XF6Q-R5XP |
org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Authentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018 · GHSA-4V3G-G84W-HV7R |
org.apache.tomcat.embed:tomcat-embed-jasperorg.apache.tomcat:jasper |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-5647 · GHSA-3GV7-3H64-78CM |
org.apache.tomcat:tomcatRed Hat Fuse 7/cxf |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2016-0706 · GHSA-6VX3-HR43-CFRH |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| High severity vulnerability that affects commons-fileupload:commons-fileuploadCVE-2016-3092 · GHSA-FVM3-CFVJ-GXQQ |
commons-fileupload:commons-fileuploadRed Hat JBoss Data Grid 6/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incorrect Authorization in Apache TomcatCVE-2016-6797 · GHSA-Q6X7-F33R-3WXX |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014 · GHSA-R4X2-3CQ5-HQVP |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Enterprise Application Platform 5/jbossweb |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Observable Discrepancy in Apache TomcatCVE-2016-0762 · GHSA-WXCP-F2C8-X6XV |
org.apache.tomcat:tomcatRed Hat Enterprise Linux 5/tomcat5 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Handling of Exceptional Conditions in Apache TomcatCVE-2017-5664 · GHSA-JMVV-524F-HJ5J |
org.apache.tomcat:tomcatRed Hat JBoss Enterprise Application Platform 5/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763 · GHSA-9HJV-9H75-XMPP |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346 · GHSA-JRCP-C39H-R29X |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat Open Redirect vulnerabilityCVE-2018-11784 · GHSA-5Q99-F34M-67GC |
org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Access Control in Apache TomcatCVE-2016-0714 · GHSA-MV42-PX54-87JW |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351 · GHSA-W7CG-5969-678W |
org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
