Apache Tomcat Denial of Service via Malformed Request Headers

Apache Tomcat vulnerable to Cross-site Scripting

Apache Tomcat allows webmasters to insert xss into error messages

Apache Tomcat has an HTTP Request/Response Smuggling vulnerability

Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.

Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector

Apache Tomcat Directory Traversal

Improper Authentication in Apache Tomcat

Apache Tomcat Vulnerable to Cross-Site Scripting

Improper Access Control in Apache Tomcat

Integer Overflow or Wraparound in Apache Tomcat

Apache Tomcat does not enforce the maxHttpHeaderSize limit

Apache Tomcat installer for Windows has an untrusted search path vulnerability

Improper Input Validation in Apache Tomcat

Access restriction bypass in Apache Tomcat

Exposure of Resource to Wrong Sphere in Apache Tomcat

Apache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash) via a crafted AJP12 packet to TCP port 8007.

Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Apache Tomcat Denial of Service via invalid HTTP priority header