Tomcat — контейнер сервлетов с открытым исходным кодом
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 533
GHSA-m59c-jpc8-m2x4
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
GHSA-jx6h-3fjx-cgv5
Apache Tomcat information exposure vulnerability
GHSA-6rxj-58jh-436r
Apache Tomcat unauthorized access vulnerability
GHSA-5q99-f34m-67gc
Apache Tomcat Open Redirect vulnerability
GHSA-pjfr-qf3p-3q25
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
ELSA-2018-2921
ELSA-2018-2921: tomcat security update (IMPORTANT)
CVE-2018-11784
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, ...
CVE-2018-11784
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
CVE-2018-11784
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
BDU:2020-01022
Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-m59c-jpc8-m2x4 In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder | CVSS3: 7.5 | 21% Средний | почти 8 лет назад |
| GHSA-jx6h-3fjx-cgv5 Apache Tomcat information exposure vulnerability | CVSS3: 6.5 | 14% Средний | почти 8 лет назад |
| GHSA-6rxj-58jh-436r Apache Tomcat unauthorized access vulnerability | CVSS3: 5.9 | 17% Средний | почти 8 лет назад |
| GHSA-5q99-f34m-67gc Apache Tomcat Open Redirect vulnerability | CVSS3: 4.3 | 94% Критический | почти 8 лет назад |
| GHSA-pjfr-qf3p-3q25 When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server | CVSS3: 8.1 | 100% Критический | почти 8 лет назад |
| ELSA-2018-2921 ELSA-2018-2921: tomcat security update (IMPORTANT) | 21% Средний | почти 8 лет назад | |
| CVE-2018-11784 When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, ... | CVSS3: 4.3 | 94% Критический | почти 8 лет назад |
 | CVE-2018-11784 When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. | CVSS3: 4.3 | 94% Критический | почти 8 лет назад |
 | CVE-2018-11784 When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. | CVSS3: 4.3 | 94% Критический | почти 8 лет назад |
 | BDU:2020-01022 Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 73% Высокий | почти 8 лет назад |
Уязвимостей на страницу