Поиск уязвимостей
Количество 13
Количество 13
CVE-2016-6797
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
CVE-2016-6797
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
CVE-2016-6797
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
CVE-2016-6797
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9. ...
GHSA-q6x7-f33r-3wxx
Incorrect Authorization in Apache Tomcat
ELSA-2017-2247
ELSA-2017-2247: tomcat security, bug fix, and enhancement update (LOW)
openSUSE-SU-2016:3144-1
Security update for tomcat
openSUSE-SU-2016:3129-1
Security update for tomcat
SUSE-SU-2016:3081-1
Security update for tomcat
SUSE-SU-2016:3079-1
Security update for tomcat
SUSE-SU-2017:1632-1
Security update for tomcat6
SUSE-SU-2017:1660-1
Security update for tomcat
ALT-PU-2017-2558
ALT-PU-2017-2558: package `tomcat` update to version 8.0.43-alt1_1jpp8
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-6797 The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not. | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
 | CVE-2016-6797 The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not. | CVSS3: 3.7 | 8% Низкий | около 10 лет назад |
 | CVE-2016-6797 The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not. | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
| CVE-2016-6797 The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9. ... | CVSS3: 7.5 | 8% Низкий | около 9 лет назад |
| GHSA-q6x7-f33r-3wxx Incorrect Authorization in Apache Tomcat | CVSS3: 7.5 | 8% Низкий | больше 4 лет назад |
| ELSA-2017-2247 ELSA-2017-2247: tomcat security, bug fix, and enhancement update (LOW) | больше 9 лет назад | ||
 | openSUSE-SU-2016:3144-1 Security update for tomcat | почти 10 лет назад | ||
| openSUSE-SU-2016:3129-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:3081-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2016:3079-1 Security update for tomcat | почти 10 лет назад | ||
| SUSE-SU-2017:1632-1 Security update for tomcat6 | больше 9 лет назад | ||
| SUSE-SU-2017:1660-1 Security update for tomcat | больше 9 лет назад | ||
| ALT-PU-2017-2558 ALT-PU-2017-2558: package `tomcat` update to version 8.0.43-alt1_1jpp8 | CVSS3: 9.8 | около 9 лет назад |
Уязвимостей на страницу