Поиск уязвимостей
Количество 38
Количество 38
CVE-2017-7674
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
CVE-2017-7674
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.1 ...
CVE-2017-5647
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
CVE-2017-5647
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
CVE-2017-5647
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C.
CVE-2017-5647
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0 ...
SUSE-SU-2021:14705-1
Security update for tomcat6
GHSA-73rx-3f9r-x949
Insufficient Verification of Data Authenticity in Apache Tomcat
BDU:2017-02035
Уязвимость фильтра CORS сервера приложений Apache Tomcat, позволяющая нарушителю осуществить заражение клиента и сервера при определенных обстоятельствах
GHSA-3gv7-3h64-78cm
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
ALT-PU-2017-2659
ALT-PU-2017-2659: package `tomcat` update to version 8.0.46-alt1_1jpp8
openSUSE-SU-2017:1292-1
Security update for tomcat
SUSE-SU-2017:1382-1
Security update for tomcat
SUSE-SU-2017:1229-1
Security update for tomcat
ALT-PU-2016-3269
ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8
SUSE-SU-2017:1632-1
Security update for tomcat6
SUSE-SU-2017:1660-1
Security update for tomcat
ALT-PU-2017-2558
ALT-PU-2017-2558: package `tomcat` update to version 8.0.43-alt1_1jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-7674 The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances. | CVSS3: 4.3 | 8% Низкий | около 9 лет назад |
| CVE-2017-7674 The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.1 ... | CVSS3: 4.3 | 8% Низкий | около 9 лет назад |
 | CVE-2017-5647 A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C. | CVSS3: 7.5 | 17% Средний | больше 9 лет назад |
 | CVE-2017-5647 A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C. | CVSS3: 7.5 | 17% Средний | больше 9 лет назад |
| CVE-2017-5647 A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. This could result in responses appearing to be sent for the wrong request. For example, a user agent that sent requests A, B and C could see the correct response for request A, the response for request C for request B and no response for request C. | CVSS3: 7.5 | 17% Средний | больше 9 лет назад |
| CVE-2017-5647 A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0 ... | CVSS3: 7.5 | 17% Средний | больше 9 лет назад |
 | SUSE-SU-2021:14705-1 Security update for tomcat6 | больше 5 лет назад | ||
| GHSA-73rx-3f9r-x949 Insufficient Verification of Data Authenticity in Apache Tomcat | CVSS3: 4.3 | 8% Низкий | больше 4 лет назад |
 | BDU:2017-02035 Уязвимость фильтра CORS сервера приложений Apache Tomcat, позволяющая нарушителю осуществить заражение клиента и сервера при определенных обстоятельствах | CVSS2: 4.3 | 8% Низкий | около 9 лет назад |
| GHSA-3gv7-3h64-78cm Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat | CVSS3: 7.5 | 17% Средний | больше 4 лет назад |
| ALT-PU-2017-2659 ALT-PU-2017-2659: package `tomcat` update to version 8.0.46-alt1_1jpp8 | CVSS3: 7.5 | почти 9 лет назад | |
| openSUSE-SU-2017:1292-1 Security update for tomcat | больше 9 лет назад | ||
| SUSE-SU-2017:1382-1 Security update for tomcat | больше 9 лет назад | ||
| SUSE-SU-2017:1229-1 Security update for tomcat | больше 9 лет назад | ||
| ALT-PU-2016-3269 ALT-PU-2016-3269: package `tomcat` update to version 8.0.26-alt1_1jpp8 | CVSS3: 9.8 | больше 10 лет назад | |
| SUSE-SU-2017:1632-1 Security update for tomcat6 | больше 9 лет назад | ||
| SUSE-SU-2017:1660-1 Security update for tomcat | больше 9 лет назад | ||
| ALT-PU-2017-2558 ALT-PU-2017-2558: package `tomcat` update to version 8.0.43-alt1_1jpp8 | CVSS3: 9.8 | около 9 лет назад |
Уязвимостей на страницу