Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor

Apache Tomcat - DoS in multipart upload

Apache Tomcat - CGI security constraint bypass

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Apache Tomcat Improper Resource Shutdown or Release vulnerability

Apache Tomcat Directory Traversal vulnerability

Apache Tomcat Incomplete Cleanup vulnerability

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

Apache Tomcat - WebSocket authentication header exposure

Apache Tomcat - Client certificate verification bypass

Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

Apache Tomcat Rewrite rule bypass

Apache Tomcat Improper Input Validation vulnerability

Apache Tomcat Cross-site scripting (XSS) vulnerability

Apache Tomcat - XSS in generated JSPs

Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.

Tomcat Vulnerable to Web Cache Poisoning

Apache Tomcat does not properly handle an invalid Transfer-Encoding header

Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109. Other versions that have reached end of support may also be affected. Users are recommended to upgrade to version 11.0.24, 10.1.57 or 9.0.120 which fix the issue.