Поиск уязвимостей
Количество 32
Количество 32
BDU:2026-08082
Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260605-73-0039
Уязвимость tomcat11
ROS-20260605-73-0038
Уязвимость tomcat10
ROS-20260605-73-0037
Уязвимость tomcat
CVE-2026-42498
Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue.
CVE-2026-42498
Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue.
CVE-2026-42498
Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue.
CVE-2026-42498
Exposure of HTTP Authentication Header to unexpected hosts during WebS ...
ALT-PU-2026-7644
ALT-PU-2026-7644: package `tomcat10` update to version 10.1.55-alt0_jvm17.p11.1
ROS-20260605-80-0030
Уязвимость tomcat11
ROS-20260605-80-0029
Уязвимость tomcat10
ROS-20260605-80-0028
Уязвимость tomcat
GHSA-fv25-8xcx-gqjc
Apache Tomcat - WebSocket authentication header exposure
ALT-PU-2016-3269
ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
RLSA-2026:69259
Moderate: tomcat update
ELSA-2026-69259
ELSA-2026-69259: tomcat update (MODERATE)
openSUSE-SU-2026:21122-1
Security update for tomcat10
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-08082 Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием защиты служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
 | ROS-20260605-73-0039 Уязвимость tomcat11 | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
| ROS-20260605-73-0038 Уязвимость tomcat10 | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
| ROS-20260605-73-0037 Уязвимость tomcat | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-42498 Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-42498 Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue. | CVSS3: 6.5 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-42498 Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
| CVE-2026-42498 Exposure of HTTP Authentication Header to unexpected hosts during WebS ... | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-7644 ALT-PU-2026-7644: package `tomcat10` update to version 10.1.55-alt0_jvm17.p11.1 | CVSS3: 9.8 | 6 месяцев назад | |
| ROS-20260605-80-0030 Уязвимость tomcat11 | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
| ROS-20260605-80-0029 Уязвимость tomcat10 | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
| ROS-20260605-80-0028 Уязвимость tomcat | CVSS3: 7.3 | 1% Низкий | 5 месяцев назад |
| GHSA-fv25-8xcx-gqjc Apache Tomcat - WebSocket authentication header exposure | CVSS3: 7.3 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2016-3269 ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8 | CVSS3: 9.8 | больше 10 лет назад | |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад | |
 | RLSA-2026:69259 Moderate: tomcat update | около 2 месяцев назад | ||
| ELSA-2026-69259 ELSA-2026-69259: tomcat update (MODERATE) | около 2 месяцев назад | ||
 | openSUSE-SU-2026:21122-1 Security update for tomcat10 | 5 месяцев назад |
Уязвимостей на страницу