Поиск уязвимостей
Количество 29
Количество 29
GHSA-9xv2-5v5q-p794
Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-65905
Authentication Bypass by Capture-replay vulnerability in Apache Tomcat ...
ROS-20260922-80-0109
Уязвимость tomcat11
ROS-20260922-80-0108
Уязвимость tomcat10
ROS-20260922-80-0107
Уязвимость tomcat
ROS-20260922-73-0083
Уязвимость tomcat11
ROS-20260922-73-0082
Уязвимость tomcat10
ROS-20260922-73-0081
Уязвимость tomcat
BDU:2026-16143
Уязвимость сервера приложений Apache Tomcat, связанная с обходом процедуры аутентификации, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
RLSA-2026:92869
Important: tomcat security update
ELSA-2026-92869
ELSA-2026-92869: tomcat security update (IMPORTANT)
ELSA-2026-92862
ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:93469
Important: tomcat security update
ELSA-2026-93469
ELSA-2026-93469: tomcat security update (IMPORTANT)
SUSE-SU-2026:4203-1
Security update for tomcat
SUSE-SU-2026:4126-1
Security update for tomcat
SUSE-SU-2026:4119-1
Security update for tomcat10
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9xv2-5v5q-p794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-65905 Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-65905 Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 4.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-65905 Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while the associated nonceCount remains within the replay window. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-65905 Authentication Bypass by Capture-replay vulnerability in Apache Tomcat ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | ROS-20260922-80-0109 Уязвимость tomcat11 | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0108 Уязвимость tomcat10 | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0107 Уязвимость tomcat | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0083 Уязвимость tomcat11 | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0082 Уязвимость tomcat10 | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0081 Уязвимость tomcat | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
 | BDU:2026-16143 Уязвимость сервера приложений Apache Tomcat, связанная с обходом процедуры аутентификации, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 9.8 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:92869 Important: tomcat security update | 8 дней назад | ||
| ELSA-2026-92869 ELSA-2026-92869: tomcat security update (IMPORTANT) | 11 дней назад | ||
| ELSA-2026-92862 ELSA-2026-92862: tomcat security, bug fix, and enhancement update (IMPORTANT) | 10 дней назад | ||
| RLSA-2026:93469 Important: tomcat security update | 5 дней назад | ||
| ELSA-2026-93469 ELSA-2026-93469: tomcat security update (IMPORTANT) | 7 дней назад | ||
 | SUSE-SU-2026:4203-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4126-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4119-1 Security update for tomcat10 | около 2 месяцев назад |
Уязвимостей на страницу