DoS (Denial of Service) org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center

🗓️ 02 Jun 2026 16:29:51Reported by security-metrics-botType

atlassian

atlassian🔗 jira.atlassian.com👁 5 Views

High severity Denial of Service in Confluence Data Center via the Tomcat Catalina dependency; upgrade to fixed versions.

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	22 Jun 202613:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar	17 Jun 202615:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Spring Security, Apache Tomcat, Netty, Lodash, Spring Framework and Node.js might affect IBM Storage Defender Copy Data Management	26 Jun 202617:03	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DevOps Build.	29 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	29 Jun 202609:47	–	ibm
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1770)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2026-1776)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-026 (ALASTOMCAT9-2026-026)	8 Jun 202600:00	–	nessus
Tenable Nessus	Debian dla-4619 : libtomcat9-embed-java - security update	6 Jun 202600:00	–	nessus

Vulners

Node

atlassian confluence_data_centerMatch6.13.0

OR

atlassian confluence_data_centerMatch7.4.0

OR

atlassian confluence_data_centerMatch7.13.0

OR

atlassian confluence_data_centerMatch7.19.0

OR

atlassian confluence_data_centerMatch8.5.0

OR

atlassian confluence_data_centerMatch8.9.0

OR

atlassian confluence_data_centerMatch8.9.1

OR

atlassian confluence_data_centerMatch8.9.2

OR

atlassian confluence_data_centerMatch8.9.3

OR

atlassian confluence_data_centerMatch8.9.4

OR

atlassian confluence_data_centerMatch9.1.0

OR

atlassian confluence_data_centerMatch9.0.1

OR

atlassian confluence_data_centerMatch8.9.5

OR

atlassian confluence_data_centerMatch9.0.2

OR

atlassian confluence_data_centerMatch9.0.3

OR

atlassian confluence_data_centerMatch8.9.6

OR

atlassian confluence_data_centerMatch8.9.7

OR

atlassian confluence_data_centerMatch9.1.1

OR

atlassian confluence_data_centerMatch8.9.8

OR

atlassian confluence_data_centerMatch9.2.0

OR

atlassian confluence_data_centerMatch9.2.1

OR

atlassian confluence_data_centerMatch9.4.0

OR

atlassian confluence_data_centerMatch9.3.1

OR

atlassian confluence_data_centerMatch9.2.2

OR

atlassian confluence_data_centerMatch9.3.2

OR

atlassian confluence_data_centerMatch9.2.3

OR

atlassian confluence_data_centerMatch9.4.1

OR

atlassian confluence_data_centerMatch9.2.4

OR

atlassian confluence_data_centerMatch9.2.5

OR

atlassian confluence_data_centerMatch9.2.6

OR

atlassian confluence_data_centerMatch9.5.1

OR

atlassian confluence_data_centerMatch9.5.2

OR

atlassian confluence_data_centerMatch9.5.3

OR

atlassian confluence_data_centerMatch9.2.7

OR

atlassian confluence_data_centerMatch10.1.0

OR

atlassian confluence_data_centerMatch9.2.8

OR

atlassian confluence_data_centerMatch10.0.2

OR

atlassian confluence_data_centerMatch10.0.3

OR

atlassian confluence_data_centerMatch9.5.4

OR

atlassian confluence_data_centerMatch9.2.9

OR

atlassian confluence_data_centerMatch10.1.1

OR

atlassian confluence_data_centerMatch10.2.0

OR

atlassian confluence_data_centerMatch9.2.10

OR

atlassian confluence_data_centerMatch10.1.2

OR

atlassian confluence_data_centerMatch9.2.11

OR

atlassian confluence_data_centerMatch9.2.12

OR

atlassian confluence_data_centerMatch10.2.1

OR

atlassian confluence_data_centerMatch9.2.13

OR

atlassian confluence_data_centerMatch10.2.2

OR

atlassian confluence_data_centerMatch9.2.14

OR

atlassian confluence_data_centerMatch10.2.3

OR

atlassian confluence_data_centerMatch9.2.15

OR

atlassian confluence_data_centerMatch10.2.6

OR

atlassian confluence_data_centerMatch9.2.17

OR

atlassian confluence_data_centerMatch10.2.7

OR

atlassian confluence_data_centerMatch9.2.19

OR

atlassian confluence_data_centerMatch10.2.10

OR

atlassian confluence_data_centerMatch10.2.11

OR

atlassian confluence_data_centerMatch9.2.20

OR

atlassian confluence_data_centerMatch9.2.21

OR

atlassian confluence_data_centerMatch10.2.13

16 Jun 2026 17:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.17.5

EPSS0.0078

SSVC

confluence data center tomcat catalina dependency denial of service upgrade recommended fixed version 9.2.21 fixed version 10.2.13 fixed version 9.0.118 cvss seven point five