PT-2026-31700

🗓️ 23 Mar 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Padding Oracle in Tomcat EncryptInterceptor with default config; fix in 11.0.19, 10.1.53, 9.0.116.

Reporter	Title	Published	Views	Family All 244
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM DataStax Enterprise	27 May 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for April 2026	30 Apr 202611:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar	13 May 202616:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	14 May 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat and Lodash might affect IBM Storage Defender Copy Data Management	4 May 202616:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl	17 Jun 202615:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar	17 Jun 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in tomcat-embed-core [CVE-2026-24880, CVE-2026-25854, CVE-2026-29129, CVE-2026-29145, CVE-2026-29146, CVE-2026-32990, CVE-2026-34483, CVE-2026-34487, CVE-2026-3450]	18 Jun 202619:57	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Tomcat application server that is shipped with IBM ApplinX is vulnerable to multiple vulnerabilities.	16 Jun 202617:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:42	–	ibm

Source	Link
bugzilla	www.bugzilla.suse.com/1261855
openwall	www.openwall.com/lists/oss-security/2026/04/09/26
suse	www.suse.com/support/update/announcement/2026/suse-su-20261604-1
twitter	www.twitter.com/getaigovernance/status/2047475071120187500
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:20612-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34486
suse	www.suse.com/security/cve/CVE-2026-29145
bugzilla	www.bugzilla.suse.com/1261850
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-29146
osv	www.osv.dev/vulnerability/openSUSE-SU-2026:20611-1

18 May 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.8

CVSS 3.19.1

EPSS0.03645

SSVC