7682 matches found
CVE-2019-0221
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a...
Amazon Linux AMI : tomcat8 (ALAS-2019-1208)
When the default servlet in Apache Tomcat returned a redirect to a directory e.g. redirecting to '/foo/' when the user requested '/foo' a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. CVE-2018-11784 When running on Windows with...
Security Bulletin: Apache Tomcat vulnerability affects IBM Storwize V7000 Unified (CVE-2019-4293)
Summary This vulnerability may allow attacker to reveal the third party software Apache Tomcat Web server version. Vulnerability Details CVEID: CVE-2019-4293 DESCRIPTION: IBM System Storage Storwize V7000 Unified V7000U configuration may allow an attacker to reveal the server version in default...
Certificate Validation Bypass
Apache Tomcat Native Connector is vulnerable to certificate validation bypass. A remote unauthenticated attacker can create a client certificate with a specially crafted AIA-Extension field that, when parsed by Tomcat Native, will trigger a parser error and cause the OCSP check to be skipped...
The vulnerability of the Apache Tomcat application server, related to security configuration errors, allows attackers to gain access to web application resources.
The vulnerability of the Apache Tomcat application server is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to web application resources...
Important: tomcat8
Issue Overview: When the default servlet in Apache Tomcat returned a redirect to a directory e.g. redirecting to '/foo/' when the user requested '/foo' a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice. CVE-2018-11784 The HTTP/2...
The vulnerability of the Apache Tomcat application server, related to access control deficiencies, allows attackers to increase their privileges.
The vulnerability of the Apache Tomcat application server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
The vulnerability of the Apache Tomcat application server, related to the use of open redirection, allows attackers to compromise the integrity of the protected information.
The vulnerability of the default server servlet engine for Apache Tomcat is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability
This module exploits a vulnerability found in Cisco Prime Infrastructure. The issue is that the TarArchive Java class the HA Health Monitor component uses does not check for any directory traversals while unpacking a Tar file, which can be abused by a remote user to leverage the UploadServlet cla...
Apache Tomcat 8.5.x < 8.5.31 Denial of Service
Binary data 700694.pasl...
Apache Tomcat 9.0.x < 9.0.10 Multiple Vulnerabilities
Binary data 700708.pasl...
Apache Tomcat 9.0.x < 9.0.10 Security Misconfiguration
Binary data 700707.pasl...
Apache Tomcat 8.0.x < 8.0.45 Cache Poisoning
Binary data 700685.pasl...
Apache Tomcat 7.0.41 < 7.0.79 Cache Poisoning Vulnerability
Binary data 700673.pasl...
Apache Tomcat 8.5.x < 8.5.16 Multiple Vulnerabilities
Binary data 700691.pasl...
Apache Tomcat 9.0.x < 9.0.0.M21 Remote Error Page Manipulation
Binary data 700701.pasl...
Apache Tomcat 8.0.x < 8.0.50 Security Constraint Weakness
Binary data 700687.pasl...
Apache Tomcat 9.0.x < 9.0.19 Remote Code Execution Vulnerability (Windows)
Binary data 700711.pasl...