Tomcat — контейнер сервлетов с открытым исходным кодом
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 143
GHSA-wjwr-3jch-479j
Apache Tomcat SendMailServlet XSS
GHSA-v66v-63h2-8q5q
Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
GHSA-qff8-g48j-pwpw
Apache Tomcat treats single quotes as delimiters in cookies
GHSA-6j8f-66vh-39mj
Apache Tomcat Mishandles Character Sequence in Cookies
GHSA-5c5p-jxvx-x7j2
Apache Tomcat vulnerable to Cross-site Scripting
GHSA-hc39-rjwp-qffq
Apache Tomcat XSS Vulnerabilities in Examples Web Application
GHSA-cjg9-7x8h-6gw3
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.
GHSA-4c6x-gfc8-c26r
Apache Tomcat Vulnerable to Cross-Site Scripting
GHSA-xmc9-6p56-3c4v
Apache Tomcat XSS In Accept-Language Headers
GHSA-4prh-gqw8-rgh5
Apache Tomcat Directory Traversal
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-wjwr-3jch-479j Apache Tomcat SendMailServlet XSS | 37% Средний | больше 3 лет назад | |
| GHSA-v66v-63h2-8q5q Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action. | 46% Средний | больше 3 лет назад | |
| GHSA-qff8-g48j-pwpw Apache Tomcat treats single quotes as delimiters in cookies | 86% Высокий | больше 3 лет назад | |
| GHSA-6j8f-66vh-39mj Apache Tomcat Mishandles Character Sequence in Cookies | 69% Средний | больше 3 лет назад | |
| GHSA-5c5p-jxvx-x7j2 Apache Tomcat vulnerable to Cross-site Scripting | 1% Низкий | больше 3 лет назад | |
| GHSA-hc39-rjwp-qffq Apache Tomcat XSS Vulnerabilities in Examples Web Application | 83% Высокий | больше 3 лет назад | |
| GHSA-cjg9-7x8h-6gw3 The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts. | 6% Низкий | больше 3 лет назад | |
| GHSA-4c6x-gfc8-c26r Apache Tomcat Vulnerable to Cross-Site Scripting | 80% Высокий | больше 3 лет назад | |
| GHSA-xmc9-6p56-3c4v Apache Tomcat XSS In Accept-Language Headers | 52% Средний | больше 3 лет назад | |
| GHSA-4prh-gqw8-rgh5 Apache Tomcat Directory Traversal | 86% Высокий | больше 3 лет назад |
Уязвимостей на страницу