Apache Tomcat和Apache Tomcat Native 安全漏洞

Apache Tomcat及其本地组件的客户端证书验证漏洞在启用证书认证时可被利用，利用被吊销证书绕过授权并提升权限。

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	27 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar	13 May 202616:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	14 May 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat and Lodash might affect IBM Storage Defender Copy Data Management	4 May 202616:20	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), URL Redirection to Untrusted Site ('Open Redirect'), and 3 more (CVE-2026-24880, CVE-2026-25854, and 3 more)	16 Jun 202614:13	–	ibm
GithubExploit	Exploit for Improper Authentication in Apache Tomcat	23 Apr 202617:26	–	githubexploit
ATTACKERKB	CVE-2026-29145	9 Apr 202619:20	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : tomcat-native (ALAS2023-2026-1595)	30 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2026-1672)	20 May 202600:00	–	nessus