Apache

Tomcat

256 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2026-43515

  • EPSS 0.07%
  • Veröffentlicht 12.05.2026 15:33:23
  • Zuletzt bearbeitet 15.05.2026 15:52:05

Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 thro...

3.7

CVE-2026-43514

  • EPSS 0.03%
  • Veröffentlicht 12.05.2026 15:32:09
  • Zuletzt bearbeitet 14.05.2026 18:46:41

Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from...

7.5

CVE-2026-43513

  • EPSS 0.06%
  • Veröffentlicht 12.05.2026 15:26:25
  • Zuletzt bearbeitet 15.05.2026 15:53:14

Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7...

9.8

CVE-2026-43512

  • EPSS 0.12%
  • Veröffentlicht 12.05.2026 15:24:02
  • Zuletzt bearbeitet 15.05.2026 15:54:37

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5...

9.8

CVE-2026-41293

  • EPSS 0.16%
  • Veröffentlicht 12.05.2026 15:19:35
  • Zuletzt bearbeitet 15.05.2026 15:57:18

Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0-M1 through 10.0.27. Older, end of support versions...

7.3

CVE-2026-42498

  • EPSS 0.05%
  • Veröffentlicht 12.05.2026 15:17:56
  • Zuletzt bearbeitet 14.05.2026 18:51:59

Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, ...

7.5

CVE-2026-41284

  • EPSS 0.04%
  • Veröffentlicht 12.05.2026 15:14:45
  • Zuletzt bearbeitet 14.05.2026 18:59:48

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may als...

7.5

CVE-2026-40075

Exploit
  • EPSS 0.08%
  • Veröffentlicht 05.05.2026 22:16:00
  • Zuletzt bearbeitet 12.05.2026 16:18:14

OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnerable to a path traversal attack. The ModuleResources...

7.5

CVE-2026-34486

Medienbericht
  • EPSS 1.22%
  • Veröffentlicht 09.04.2026 20:16:25
  • Zuletzt bearbeitet 14.04.2026 12:45:40

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to ve...

7.5

CVE-2026-34487

  • EPSS 0.09%
  • Veröffentlicht 09.04.2026 20:16:25
  • Zuletzt bearbeitet 14.04.2026 12:44:45

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 th...