CVE_Project

CVEProject Preparations for exploitation: 1.Install Tomcat 7 on the virtual machine sudo apt-get install tomcat7 2.If the first step is failed,set JDKDIRS="/usr/lib/jvm/java-8-oracle" and add the statements “export JAVAHOME=/usr/lib/jvm/java-8-oracle” and “export CATALINAHOME=/usr/share/tomcat7”...

OgnlContentTypeRejectorValve

OgnlContentTypeRejectorValva This is Valve for Tomcat7 to block Struts 2 Remote Code Execution vulnerability CVE-2017-5638...

BIT-TOMCAT-2020-1938

When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...

com.ovea.tajin.server:tajin-server-jetty8 (>=1.0.b1, <=1.0.b11), com.ovea.tajin.server:tajin-server-jetty9 (>=1.0.b1, <=1.0.b11) +10 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.ovea.tajin.server:tajin-server-jetty8 =1.0.b1, =1.0.b1, =4.7.1, =3.2.1, =1.2.0.beta1,...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.100), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.100) +1 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.100 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.107) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.sniffy:sniffy-integration-tests-tomcat =3.1.10, =3.15.3, =3.16.8 Source...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.107) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.sniffy:sniffy-integration-tests-tomcat =3.1.10, =3.15.3, =3.16.8 Source...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.107) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.sniffy:sniffy-integration-tests-tomcat =3.1.10, =3.15.3, =3.16.8 Source...

com.ovea.tajin.server:tajin-server-jetty8 (>=1.0.b1, <=1.0.b11), com.ovea.tajin.server:tajin-server-jetty9 (>=1.0.b1, <=1.0.b11) +10 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.8)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.ovea.tajin.server:tajin-server-jetty8 =1.0.b1, =1.0.b1, =4.7.1, =3.2.1, =1.2.0.beta1,...