Поиск уязвимостей
Количество 23
Количество 23
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by securit ...
ROS-20260922-80-0099
Уязвимость tomcat11
ROS-20260922-80-0098
Уязвимость tomcat10
ROS-20260922-80-0097
Уязвимость tomcat
ROS-20260922-73-0074
Уязвимость tomcat11
ROS-20260922-73-0073
Уязвимость tomcat10
ROS-20260922-73-0072
Уязвимость tomcat
GHSA-w3xg-786f-g788
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
BDU:2026-16147
Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры авторизации, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
SUSE-SU-2026:4203-1
Security update for tomcat
SUSE-SU-2026:4126-1
Security update for tomcat
SUSE-SU-2026:4119-1
Security update for tomcat10
SUSE-SU-2026:4114-1
Security update for tomcat11
openSUSE-SU-2026:21823-1
Security update for tomcat
openSUSE-SU-2026:21811-1
Security update for tomcat11
openSUSE-SU-2026:21810-1
Security update for tomcat10
ALT-PU-2026-13975
ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 2.7 | 0% Низкий | 2 месяца назад |
 | CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-66422 Improper Authorization vulnerability in Apache Tomcat cause by securit ... | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | ROS-20260922-80-0099 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0098 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-80-0097 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0074 Уязвимость tomcat11 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0073 Уязвимость tomcat10 | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| ROS-20260922-73-0072 Уязвимость tomcat | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| GHSA-w3xg-786f-g788 Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole(). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | BDU:2026-16147 Уязвимость сервера приложений Apache Tomcat, связанная с недостатками процедуры авторизации, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:4203-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4126-1 Security update for tomcat | около 2 месяцев назад | ||
| SUSE-SU-2026:4119-1 Security update for tomcat10 | около 2 месяцев назад | ||
| SUSE-SU-2026:4114-1 Security update for tomcat11 | около 2 месяцев назад | ||
| openSUSE-SU-2026:21823-1 Security update for tomcat | около 2 месяцев назад | ||
| openSUSE-SU-2026:21811-1 Security update for tomcat11 | 2 месяца назад | ||
| openSUSE-SU-2026:21810-1 Security update for tomcat10 | 2 месяца назад | ||
| ALT-PU-2026-13975 ALT-PU-2026-13975: package `tomcat10` update to version 10.1.59-alt0.p11.1 | CVSS3: 9.8 | 2 месяца назад |
Уязвимостей на страницу