Поиск уязвимостей
Количество 19
Количество 19
CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.
CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.
CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.
CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomc ...
ROS-20261023-80-0160
Уязвимость tomcat11
ROS-20261023-80-0159
Уязвимость tomcat10
ROS-20261023-80-0158
Уязвимость tomcat
ROS-20261023-73-0163
Уязвимость tomcat11
ROS-20261023-73-0162
Уязвимость tomcat10
ROS-20261023-73-0161
Уязвимость tomcat
GHSA-cf68-55f3-8gfw
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.
ALT-PU-2026-16757
ALT-PU-2026-16757: package `tomcat10` update to version 10.1.60-alt0.p11.1
openSUSE-SU-2026:21984-1
Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11
SUSE-SU-2026:4546-1
Security update for libtcnative-1-0, tomcat, tomcat10
SUSE-SU-2026:4544-1
Security update for libtcnative-1-0, tomcat11
SUSE-SU-2026:4927-1
Security update for libapr1, libtcnative-1-0, tomcat
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-73581 Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-73581 Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-73581 Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue. | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-73581 Improper Check for Certificate Revocation vulnerability in Apache Tomc ... | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
 | ROS-20261023-80-0160 Уязвимость tomcat11 | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| ROS-20261023-80-0159 Уязвимость tomcat10 | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| ROS-20261023-80-0158 Уязвимость tomcat | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| ROS-20261023-73-0163 Уязвимость tomcat11 | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| ROS-20261023-73-0162 Уязвимость tomcat10 | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| ROS-20261023-73-0161 Уязвимость tomcat | CVSS3: 6.5 | 0% Низкий | 17 дней назад |
| GHSA-cf68-55f3-8gfw Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through 9.0.121. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue. | 0% Низкий | около 2 месяцев назад | |
| ALT-PU-2026-16757 ALT-PU-2026-16757: package `tomcat10` update to version 10.1.60-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
 | openSUSE-SU-2026:21984-1 Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 | около 1 месяца назад | ||
| SUSE-SU-2026:4546-1 Security update for libtcnative-1-0, tomcat, tomcat10 | около 1 месяца назад | ||
| SUSE-SU-2026:4544-1 Security update for libtcnative-1-0, tomcat11 | около 1 месяца назад | ||
| SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat | 11 дней назад | ||
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад |
Уязвимостей на страницу