Поиск уязвимостей
Количество 42
Количество 42
openSUSE-SU-2026:21490-1
Security update for tomcat11
openSUSE-SU-2026:21487-1
Security update for tomcat10
openSUSE-SU-2026:21486-1
Security update for tomcat
SUSE-SU-2026:3440-1
Security update for tomcat
SUSE-SU-2026:3430-1
Security update for tomcat11
SUSE-SU-2026:3419-1
Security update for tomcat
SUSE-SU-2026:3418-1
Security update for tomcat10
ALT-PU-2026-11172
ALT-PU-2026-11172: package `tomcat10` update to version 10.1.57-alt0.p11.1
ELSA-2026-68677
ELSA-2026-68677: tomcat security update (IMPORTANT)
ELSA-2026-68660
ELSA-2026-68660: tomcat security, bug fix, and enhancement update (MODERATE)
ELSA-2026-68651
ELSA-2026-68651: tomcat9 security update (MODERATE)
CVE-2026-59084
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.
CVE-2026-59084
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.
CVE-2026-59084
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.
CVE-2026-59084
Insufficient Technical Documentation vulnerability in Apache Tomcat si ...
CVE-2026-59083
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.
CVE-2026-59083
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.
CVE-2026-59083
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue.
CVE-2026-59083
Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apac ...
RLSA-2026:68660
Moderate: tomcat security, bug fix, and enhancement update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2026:21490-1 Security update for tomcat11 | 3 месяца назад | ||
| openSUSE-SU-2026:21487-1 Security update for tomcat10 | 3 месяца назад | ||
| openSUSE-SU-2026:21486-1 Security update for tomcat | 3 месяца назад | ||
| SUSE-SU-2026:3440-1 Security update for tomcat | 3 месяца назад | ||
| SUSE-SU-2026:3430-1 Security update for tomcat11 | 3 месяца назад | ||
| SUSE-SU-2026:3419-1 Security update for tomcat | 3 месяца назад | ||
| SUSE-SU-2026:3418-1 Security update for tomcat10 | 3 месяца назад | ||
| ALT-PU-2026-11172 ALT-PU-2026-11172: package `tomcat10` update to version 10.1.57-alt0.p11.1 | CVSS3: 9.1 | 4 месяца назад | |
| ELSA-2026-68677 ELSA-2026-68677: tomcat security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-68660 ELSA-2026-68660: tomcat security, bug fix, and enhancement update (MODERATE) | около 2 месяцев назад | ||
| ELSA-2026-68651 ELSA-2026-68651: tomcat9 security update (MODERATE) | около 2 месяцев назад | ||
 | CVE-2026-59084 Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue. | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59084 Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue. | CVSS3: 3.8 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59084 Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue. | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
| CVE-2026-59084 Insufficient Technical Documentation vulnerability in Apache Tomcat si ... | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
| CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue. | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
| CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue. | CVSS3: 3.7 | 1% Низкий | 4 месяца назад |
| CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0 through 8.5.100. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120, which fix the issue. | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
| CVE-2026-59083 Improper Handling of URL Encoding (Hex Encoding) vulnerability in Apac ... | CVSS3: 9.1 | 1% Низкий | 4 месяца назад |
 | RLSA-2026:68660 Moderate: tomcat security, bug fix, and enhancement update | около 2 месяцев назад |
Уязвимостей на страницу