Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.

OSVersionArchitecturePackageVersionFilename
Fedora39anytomcat< 9.0.89UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Fedora	39	any	tomcat	< 9.0.89	UNKNOWN

tomcat 4

mageia 1

nessus 36

ibm 15

debian 3

openvas 11

redhat 10

almalinux 2

oraclelinux 2

osv 11

rocky 1

fedora 1

kaspersky 1

debiancve 2

redhatcve 2

redos 1

nvd 2

cve 2

cnvd 1

ubuntucve 2

hackerone 1

vulnrichment 2

cgr 2

veracode 2

github 2

cvelist 2

prion 2

wolfi 2

amazon 1

thn 1

oracle 1

tomcat

Fixed in Apache Tomcat 8.5.99

2024-02-19 00:00:00

Fixed in Apache Tomcat 9.0.86

2024-02-19 00:00:00

Fixed in Apache Tomcat 11.0.0-M17

2024-02-19 00:00:00

mageia

Updated tomcat packages fix security vulnerabilities

2024-03-27 01:02:49

nessus

Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2024-577)

2024-04-03 00:00:00

Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-013)

2024-04-18 00:00:00

RHEL 9 : tomcat (RHSA-2024:3307)

2024-05-23 00:00:00

ibm

Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

2024-06-19 15:29:31

Security Bulletin: Apache Tomcat is vulnerable to CVE-2024-24549 and CVE-2024-23672 used in IBM Maximo Application Suite - Monitor Component

2024-05-02 19:25:53

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-24549, CVE-2024-23672)

2024-04-05 11:18:36

debian

[SECURITY] [DLA 3779-1] tomcat9 security update

2024-04-06 05:26:26

[SECURITY] [DSA 5665-1] tomcat10 security update

2024-04-17 22:03:15

[SECURITY] [DSA 5667-1] tomcat9 security update

2024-04-19 20:06:14

openvas

SUSE: Security Advisory (SUSE-SU-2024:1345-1)

2024-05-07 00:00:00

Apache Tomcat Multiple DoS Vulnerabilities (Mar 2024) - Linux

2024-03-13 00:00:00

Apache Tomcat Multiple DoS Vulnerabilities (Mar 2024) - Windows

2024-03-13 00:00:00

redhat

(RHSA-2024:3308) Important: tomcat security and bug fix update

2024-05-23 05:51:21

(RHSA-2024:3307) Important: tomcat security and bug fix update

2024-05-23 05:51:20

(RHSA-2024:1916) Important: Red Hat JBoss Web Server 6.0.2 release and security update

2024-05-07 12:59:16

almalinux

Important: tomcat security and bug fix update

2024-06-06 00:00:00

Important: tomcat security and bug fix update

2024-05-23 00:00:00

oraclelinux

tomcat security and bug fix update

2024-05-23 00:00:00

tomcat security and bug fix update

2024-06-06 00:00:00

osv

Important: tomcat security and bug fix update

2024-06-14 13:59:30

tomcat9 - security update

2024-04-06 00:00:00

Important: tomcat security and bug fix update

2024-05-23 00:00:00

rocky

tomcat security and bug fix update

2024-06-14 14:00:40

fedora

[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40

2024-06-23 06:52:19

kaspersky

KLA65144 Multiple vulnerabilities in Apache Tomcat

2024-02-19 00:00:00

debiancve

CVE-2024-23672

2024-03-13 16:15:29

CVE-2024-24549

2024-03-13 16:15:29

redhatcve

CVE-2024-23672

2024-03-14 21:39:59

CVE-2024-24549

2024-03-14 21:40:09

redos

ROS-20240422-09

2024-04-22 00:00:00

nvd

CVE-2024-23672

2024-03-13 16:15:29

CVE-2024-24549

2024-03-13 16:15:29

cve

CVE-2024-23672

2024-03-13 16:15:29

CVE-2024-24549

2024-03-13 16:15:29

cnvd

Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)

2024-03-15 00:00:00

ubuntucve

CVE-2024-23672

2024-03-13 00:00:00

CVE-2024-24549

2024-03-13 00:00:00

hackerone

Internet Bug Bounty: Denial of Service caused by HTTP/2 CONTINUATION Flood

2024-01-25 12:51:50

vulnrichment

CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS

2024-03-13 15:46:53

CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake

2024-03-13 15:48:42

cgr

CVE-2024-24549 vulnerabilities

2024-05-19 03:07:16

CVE-2024-23672 vulnerabilities

2024-05-19 03:07:16

veracode

Denial Of Service (DoS)

2024-03-16 20:57:13

Denial Of Service (DoS)

2024-03-15 06:11:57

github

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests

2024-03-13 18:31:34

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat

2024-03-13 18:31:34

cvelist

CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS

2024-03-13 15:46:53

CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake

2024-03-13 15:48:42

prion

Input validation

2024-03-13 16:15:00

Input validation

2024-03-13 16:15:00

wolfi

CVE-2024-23672 vulnerabilities

2024-06-24 09:08:26

CVE-2024-24549 vulnerabilities

2024-06-24 09:08:26

amazon

Important: tomcat

2024-04-11 01:07:00

thn

New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

2024-04-04 11:15:00

oracle

Oracle Critical Patch Update Advisory - April 2024

2024-04-16 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

Related for FEDORA:47FF520C8DC4