Business Logic Vulnerability org.apache.tomcat:tomcat-catalina Dependency in Bamboo Data Center

🗓️ 01 Jun 2026 22:29:26Reported by security-metrics-botType

High severity Bamboo Data Center business logic flaw due to tomcat-catalina; unauthenticated asset exposure; upgrade to fixed versions 12.1.8 or 10.2.20.

Reporter	Title	Published	Views	Family All 103
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	22 Jun 202613:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar	17 Jun 202615:33	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl and tomcat-embed-core-10.1.54.jar which are vulnerable to CVE-2026-39892, CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	25 Jun 202616:30	–	ibm
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1770)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2026-1776)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-026 (ALASTOMCAT9-2026-026)	8 Jun 202600:00	–	nessus
Tenable Nessus	Debian dla-4619 : libtomcat9-embed-java - security update	6 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6328 : libtomcat10-embed-java - security update	8 Jun 202600:00	–	nessus