Tomcat — контейнер сервлетов с открытым исходным кодом
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 153
GHSA-pm78-wxxf-fw98
Cross-site scripting in Apache Tomcat
GHSA-jpqr-vh55-xqxf
Apache Tomcat Buffer Over-Read
GHSA-p57v-p3fx-qgwm
Apache Tomcat XSS Vulnerability
GHSA-wfj7-mhr5-pcwq
Apache Tomcat Reveals Directories
GHSA-qrcx-p4rr-g48h
Apache Tomcat allows remote attackers to read JSP source files
GHSA-mxxf-x9fw-f2hv
Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.
GHSA-x89r-2wjq-mj7x
Apache Tomcat Discloses MS-DOS Pathname
GHSA-8f4w-jwqv-5cxc
Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests
GHSA-qhqv-q4xg-f6g7
Apache Tomcat AJP Connector Information Leak
GHSA-f2gq-p6qv-ccw4
Tomcat Vulnerable to Web Cache Poisoning
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-pm78-wxxf-fw98 Cross-site scripting in Apache Tomcat | 77% Высокий | больше 3 лет назад | |
| GHSA-jpqr-vh55-xqxf Apache Tomcat Buffer Over-Read | 2% Низкий | больше 3 лет назад | |
| GHSA-p57v-p3fx-qgwm Apache Tomcat XSS Vulnerability | 15% Средний | больше 3 лет назад | |
| GHSA-wfj7-mhr5-pcwq Apache Tomcat Reveals Directories | 52% Средний | больше 3 лет назад | |
| GHSA-qrcx-p4rr-g48h Apache Tomcat allows remote attackers to read JSP source files | 1% Низкий | больше 3 лет назад | |
| GHSA-mxxf-x9fw-f2hv Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp. NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries. | 13% Средний | больше 3 лет назад | |
| GHSA-x89r-2wjq-mj7x Apache Tomcat Discloses MS-DOS Pathname | 18% Средний | больше 3 лет назад | |
| GHSA-8f4w-jwqv-5cxc Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests | 21% Средний | больше 3 лет назад | |
| GHSA-qhqv-q4xg-f6g7 Apache Tomcat AJP Connector Information Leak | 3% Низкий | больше 3 лет назад | |
| GHSA-f2gq-p6qv-ccw4 Tomcat Vulnerable to Web Cache Poisoning | 82% Высокий | больше 3 лет назад |
Уязвимостей на страницу