Поиск уязвимостей
Количество 28
Количество 28
BDU:2026-06931
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии
ROS-20260506-73-0030
Уязвимость tomcat-native
ROS-20260506-73-0029
Уязвимость tomcat11
ROS-20260506-73-0028
Уязвимость tomcat10
ROS-20260506-73-0027
Уязвимость tomcat
ALT-PU-2026-5513
ALT-PU-2026-5513: package `tomcat10` update to version 10.1.53-alt1_jvm17.p11
CVE-2026-29145
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.
CVE-2026-29145
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.
CVE-2026-29145
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.
CVE-2026-29145
CLIENT_CERT authentication does not fail as expected for some scenario ...
ROS-20260506-80-0029
Уязвимость tomcat-native
ROS-20260506-80-0028
Уязвимость tomcat11
ROS-20260506-80-0027
Уязвимость tomcat10
ROS-20260506-80-0026
Уязвимость tomcat
GHSA-95jq-rwvf-vjx4
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
RLSA-2026:25341
Important: tomcat9 security update
openSUSE-SU-2026:20612-1
Security update for tomcat10
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-06931 Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии | CVSS3: 9.1 | 1% Низкий | 7 месяцев назад |
 | ROS-20260506-73-0030 Уязвимость tomcat-native | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-73-0029 Уязвимость tomcat11 | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-73-0028 Уязвимость tomcat10 | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-73-0027 Уязвимость tomcat | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-5513 ALT-PU-2026-5513: package `tomcat10` update to version 10.1.53-alt1_jvm17.p11 | CVSS3: 9.1 | 7 месяцев назад | |
 | CVE-2026-29145 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue. | CVSS3: 9.1 | 1% Низкий | 7 месяцев назад |
 | CVE-2026-29145 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue. | CVSS3: 5.9 | 1% Низкий | 7 месяцев назад |
 | CVE-2026-29145 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13. Users are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue. | CVSS3: 9.1 | 1% Низкий | 7 месяцев назад |
| CVE-2026-29145 CLIENT_CERT authentication does not fail as expected for some scenario ... | CVSS3: 9.1 | 1% Низкий | 7 месяцев назад |
| ROS-20260506-80-0029 Уязвимость tomcat-native | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-80-0028 Уязвимость tomcat11 | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-80-0027 Уязвимость tomcat10 | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| ROS-20260506-80-0026 Уязвимость tomcat | CVSS3: 9.1 | 1% Низкий | 6 месяцев назад |
| GHSA-95jq-rwvf-vjx4 Apache Tomcat: CLIENT_CERT authentication does not fail as expected | CVSS3: 9.1 | 1% Низкий | 7 месяцев назад |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад | |
 | RLSA-2026:25341 Important: tomcat9 security update | около 1 месяца назад | ||
 | openSUSE-SU-2026:20612-1 Security update for tomcat10 | 7 месяцев назад |
Уязвимостей на страницу