Поиск уязвимостей
Количество 23
Количество 23
BDU:2026-16147
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры авторизации, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by securit ...
ALT-PU-2026-13975
ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1
ROS-20260922-80-0099
Уязвимость tomcat11
ROS-20260922-80-0098
Уязвимость tomcat10
ROS-20260922-80-0097
Уязвимость tomcat
ROS-20260922-73-0074
Уязвимость tomcat11
ROS-20260922-73-0073
Уязвимость tomcat10
ROS-20260922-73-0072
Уязвимость tomcat
GHSA-w3xg-786f-g788
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
ALT-PU-2026-17502
ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1
ALT-PU-2026-17907
ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1
ALT-PU-2026-19156
ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1
SUSE-SU-2026:4203-1
Security update for tomcat
SUSE-SU-2026:4126-1
Security update for tomcat
SUSE-SU-2026:4119-1
Security update for tomcat10
SUSE-SU-2026:4114-1
Security update for tomcat11
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-16147 Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры авторизации, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 2.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by securit ... | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-13975 ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1 | CVSS3: 9.8 | 2 месяца назад | |
 | ROS-20260922-80-0099 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0098 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0097 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0074 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0073 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0072 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| GHSA-w3xg-786f-g788 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-17502 ALT-PU-2026-17502: package `tomcat` update to version 9.0.121-alt0.p11.1 | CVSS3: 9.8 | около 1 месяца назад | |
| ALT-PU-2026-17907 ALT-PU-2026-17907: package `tomcat` update to version 9.0.121-alt0_1jpp17.p10.1 | CVSS3: 9.8 | 28 дней назад | |
| ALT-PU-2026-19156 ALT-PU-2026-19156: package `tomcat10` update to version 10.1.60-alt0.p10.1 | CVSS3: 9.8 | 17 дней назад | |
 | SUSE-SU-2026:4203-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4126-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4119-1 Security update for tomcat10 | около 2 месяцев назад | ||
| SUSE-SU-2026:4114-1 Security update for tomcat11 | 2 месяца назад |
Уязвимостей на страницу