Количество 16
Количество 16
GHSA-9m89-8frq-c98c
Apache Tomcat - AJP secret compared in non-constant time
CVE-2026-43514
Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
CVE-2026-43514
Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
CVE-2026-43514
Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue.
CVE-2026-43514
Observable Timing Discrepancy vulnerabilitywhen comparing AJP secret i ...
BDU:2026-08079
Уязвимость сервера приложений Apache Tomcat, связанная с раскрытием информации из-за несоответствия во времени, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20260605-73-0030
Уязвимость tomcat11
ROS-20260605-73-0029
Уязвимость tomcat10
ROS-20260605-73-0028
Уязвимость tomcat
openSUSE-SU-2026:21122-1
Security update for tomcat10
openSUSE-SU-2026:21121-1
Security update for tomcat11
openSUSE-SU-2026:21117-1
Security update for tomcat
SUSE-SU-2026:2675-1
Security update for tomcat
SUSE-SU-2026:2377-1
Security update for tomcat10
SUSE-SU-2026:2374-1
Security update for tomcat11
SUSE-SU-2026:2299-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9m89-8frq-c98c Apache Tomcat - AJP secret compared in non-constant time | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-43514 Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-43514 Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-43514 Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue. | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
| CVE-2026-43514 Observable Timing Discrepancy vulnerabilitywhen comparing AJP secret i ... | CVSS3: 3.7 | 0% Низкий | 3 месяца назад |
 | BDU:2026-08079 Уязвимость сервера приложений Apache Tomcat, связанная с раскрытием информации из-за несоответствия во времени, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.5 | 0% Низкий | 3 месяца назад |
 | ROS-20260605-73-0030 Уязвимость tomcat11 | CVSS3: 3.7 | 0% Низкий | около 2 месяцев назад |
| ROS-20260605-73-0029 Уязвимость tomcat10 | CVSS3: 3.7 | 0% Низкий | около 2 месяцев назад |
| ROS-20260605-73-0028 Уязвимость tomcat | CVSS3: 3.7 | 0% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:21122-1 Security update for tomcat10 | около 1 месяца назад | ||
| openSUSE-SU-2026:21121-1 Security update for tomcat11 | около 1 месяца назад | ||
| openSUSE-SU-2026:21117-1 Security update for tomcat | около 1 месяца назад | ||
| SUSE-SU-2026:2675-1 Security update for tomcat | около 1 месяца назад | ||
| SUSE-SU-2026:2377-1 Security update for tomcat10 | около 2 месяцев назад | ||
| SUSE-SU-2026:2374-1 Security update for tomcat11 | около 2 месяцев назад | ||
| SUSE-SU-2026:2299-1 Security update for tomcat | около 2 месяцев назад |
Уязвимостей на страницу