Tomcat — контейнер сервлетов с открытым исходным кодом
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 466
GHSA-f98p-9pp6-7q6c
Apache Tomcat Cross-site scripting (XSS) vulnerability
GHSA-q74x-qqhr-f8rx
Apache Tomcat Cross-site scripting (XSS) vulnerability
GHSA-qjw9-54p2-cgcx
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
GHSA-5x5f-9r6q-q7mh
Apache Tomcat Sensitive Information Disclosure
GHSA-qrj4-rmqg-4hcp
Apache Tomcat Does Not Properly Handle Empty Requests
GHSA-v5p2-vg3c-pmrr
Apache Tomcat Path Traversal Vulnerability
GHSA-w65j-cmqc-37p2
JULI logging component in Apache Tomcat does not restrict certain permissions for web applications
GHSA-cww4-vj5r-rx57
Exposure of Sensitive Information in Apache Tomcat
GHSA-g77g-vjjm-x83j
Apache Tomcat Example Application CSRF and XSS Vulnerabilities
GHSA-36hp-4x3g-phrg
Apache Tomcat's CookieExample Vulnerable to XSS
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-f98p-9pp6-7q6c Apache Tomcat Cross-site scripting (XSS) vulnerability | 10% Низкий | больше 4 лет назад | |
| GHSA-q74x-qqhr-f8rx Apache Tomcat Cross-site scripting (XSS) vulnerability | 76% Высокий | больше 4 лет назад | |
| GHSA-qjw9-54p2-cgcx The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. | 20% Средний | больше 4 лет назад | |
| GHSA-5x5f-9r6q-q7mh Apache Tomcat Sensitive Information Disclosure | 5% Низкий | больше 4 лет назад | |
| GHSA-qrj4-rmqg-4hcp Apache Tomcat Does Not Properly Handle Empty Requests | 5% Низкий | больше 4 лет назад | |
| GHSA-v5p2-vg3c-pmrr Apache Tomcat Path Traversal Vulnerability | 40% Средний | больше 4 лет назад | |
| GHSA-w65j-cmqc-37p2 JULI logging component in Apache Tomcat does not restrict certain permissions for web applications | 5% Низкий | больше 4 лет назад | |
| GHSA-cww4-vj5r-rx57 Exposure of Sensitive Information in Apache Tomcat | 63% Средний | больше 4 лет назад | |
| GHSA-g77g-vjjm-x83j Apache Tomcat Example Application CSRF and XSS Vulnerabilities | 2% Низкий | больше 4 лет назад | |
| GHSA-36hp-4x3g-phrg Apache Tomcat's CookieExample Vulnerable to XSS | 3% Низкий | больше 4 лет назад |
Уязвимостей на страницу