USN-4128-1 tomcat8 vulnerabilities

🗓️ 10 Sep 2019 18:22:28Reported by GoogleType

osv

osv🔗 osv.dev

Tomcat 8 XSS from unescaped printenv and HTTP two window exhaustion could cause denial of service.

Reporter	Title	Published	Views	Family All 234
0day.today	Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS) Vulnerability	13 Jul 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: CVE-2019-10072	24 Jul 202021:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	10 Jan 202007:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2019-0232, CVE-2019-0221)	13 Jan 202012:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities CVE-2019-10072	17 Jul 201909:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Platform Symphony	2 Jul 202109:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Apache Tomcat affects multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0221)	19 Jun 201919:35	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4128-1
ubuntu	www.ubuntu.com/security/CVE-2019-0221
ubuntu	www.ubuntu.com/security/CVE-2019-10072

10 Feb 2026 04:41Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

CVSS 37.5

EPSS0.713

Tomcat eight Cross site scripting Http two Denial of service