Поиск уязвимостей
Количество 24
Количество 24
BDU:2026-07146
Уязвимость сервера приложений Apache Tomcat, связанная c недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии
ROS-20260506-73-0039
Уязвимость tomcat11
ROS-20260506-73-0038
Уязвимость tomcat10
ROS-20260506-73-0037
Уязвимость tomcat
CVE-2026-34500
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue.
CVE-2026-34500
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue.
CVE-2026-34500
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue.
CVE-2026-34500
CLIENT_CERT authentication does not fail as expected for some scenario ...
ALT-PU-2026-7644
ALT-PU-2026-7644: package `tomcat10` update to version 10.1.55-alt0_jvm17.p11.1
ROS-20260506-80-0038
Уязвимость tomcat11
ROS-20260506-80-0037
Уязвимость tomcat10
ROS-20260506-80-0036
Уязвимость tomcat
GHSA-24j9-x2wg-9qv6
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
RLSA-2026:25341
Important: tomcat9 security update
openSUSE-SU-2026:20612-1
Security update for tomcat10
openSUSE-SU-2026:20611-1
Security update for tomcat
openSUSE-SU-2026:20595-1
Security update for tomcat11
SUSE-SU-2026:1604-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-07146 Уязвимость сервера приложений Apache Tomcat, связанная c недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | ROS-20260506-73-0039 Уязвимость tomcat11 | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| ROS-20260506-73-0038 Уязвимость tomcat10 | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| ROS-20260506-73-0037 Уязвимость tomcat | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-34500 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-34500 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue. | CVSS3: 5.9 | 0% Низкий | 7 месяцев назад |
 | CVE-2026-34500 CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.20, from 10.1.22 through 10.1.53, from 9.0.92 through 9.0.116. Users are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fixes the issue. | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| CVE-2026-34500 CLIENT_CERT authentication does not fail as expected for some scenario ... | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2026-7644 ALT-PU-2026-7644: package `tomcat10` update to version 10.1.55-alt0_jvm17.p11.1 | CVSS3: 9.8 | 6 месяцев назад | |
| ROS-20260506-80-0038 Уязвимость tomcat11 | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| ROS-20260506-80-0037 Уязвимость tomcat10 | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| ROS-20260506-80-0036 Уязвимость tomcat | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| GHSA-24j9-x2wg-9qv6 Apache Tomcat: CLIENT_CERT authentication does not fail as expected | CVSS3: 6.5 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
 | RLSA-2026:25341 Important: tomcat9 security update | около 1 месяца назад | ||
 | openSUSE-SU-2026:20612-1 Security update for tomcat10 | 7 месяцев назад | ||
| openSUSE-SU-2026:20611-1 Security update for tomcat | 7 месяцев назад | ||
| openSUSE-SU-2026:20595-1 Security update for tomcat11 | 7 месяцев назад | ||
| SUSE-SU-2026:1604-1 Security update for tomcat | 7 месяцев назад |
Уязвимостей на страницу