Lucene search
+L

6 matches found

OSV
OSV
added 2026/09/11 5:58 a.m.9 views

BIT-TOMCAT-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 10:17 p.m.12 views

DEBIAN-CVE-2026-73180

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

6.8CVSS5.4AI score0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/25 10:01 p.m.5 views

CVE-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

5.3AI score0.00536EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 10:01 p.m.80 views

CVE-2026-73180

Apache Tomcat is affected by an insufficient session expiration flaw. If the session ID of an authenticated HTTP session is changed after a WebSocket connection has been established under that session, the WebSocket session is not closed when the HTTP session ends, as required by the Jakarta WebS...

6.8CVSS5.3AI score0.00536EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/25 10:01 p.m.63 views

CVE-2026-73180 Apache Tomcat: Authenticated WebSocket session survives end of HTTP session

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...

0.00536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.14 views

PT-2026-81891

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.24 Apache Tomcat versions 10.1.0-M1 through 10.1.57 Apache Tomcat versions 9.0.0.M1 through 9.0.120 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.43 through 7.0.109...

6.8CVSS5.3AI score0.00536EPSS
SaveExploits0References45
Rows per page
Query Builder