Lucene search
+L

60 matches found

RedHat Linux
RedHat Linux
•added 2026/09/18 10:11 a.m.•12 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 4:09 p.m.•11 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:17 p.m.•10 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:09 p.m.•10 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:08 p.m.•8 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:07 p.m.•17 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/17 3:04 p.m.•8 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•7 views

Astra Linux – Vulnerability in Tomcat9

A flaw in improper authentication in Apache Tomcat allowed for a replay attack on the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat versions: 11.0.0-M1 through 11.0.22, 10.1.0-M1 through 10.1.55, 9.0.13 through 9.0.18, 8.5.38 through 8.5.100, and 7.0.100 through...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/14 5:05 a.m.•6 views

tomcat: Apache Tomcat: Replay attack via improper authentication in EncryptionInterceptor

A flaw was found in Apache Tomcat. An improper authentication vulnerability in the EncryptionInterceptor component allows a remote attacker to perform a replay attack. This could lead to unauthorized access or manipulation of data within the cluster component...

6.5CVSS6.5AI score0.00436EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•12 views

SUSE SLES15: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (SUSE-SU-2026:3087-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3087-1 advisory. This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: - CVE-2026-50229: improper...

9.1CVSS6.3AI score0.04091EPSS
SaveExploits1References20
SUSE CVE
SUSE CVE
•added 2026/07/01 3:15 a.m.•19 views

SUSE CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

4.2CVSS6.6AI score0.00436EPSS
SaveExploits0References10
Snyk
Snyk
•added 2026/06/29 10:22 p.m.•14 views

Improper Authentication

Overview org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Improper Authentication in the EncryptionInterceptor process of the cluster component. An...

8.8CVSS6.6AI score0.00436EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/29 10:22 p.m.•9 views

Improper Authentication

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Improper Authentication in the EncryptionInterceptor process of the cluster component. An attacker can gain unauthorized access or...

8.8CVSS6.6AI score0.00436EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/29 9:16 p.m.•14 views

DEBIAN-CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.5CVSS6.6AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/29 9:16 p.m.•26 views

CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.5CVSS0.00436EPSS
SaveExploits0References2
OSV
OSV
•added 2026/06/29 9:16 p.m.•13 views

UBUNTU-CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.5CVSS6.6AI score0.00436EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/06/29 9:16 p.m.•17 views

CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.5CVSS6.7AI score0.00436EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/06/29 8:44 p.m.•115 views

CVE-2026-55955 Apache Tomcat: EncryptInterceptor not protected against replay attacks

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

0.00436EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/06/29 8:44 p.m.•32 views

CVE-2026-55955

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.5CVSS6.6AI score0.00436EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/06/29 8:44 p.m.•12 views

CVE-2026-55955 Apache Tomcat: EncryptInterceptor not protected against replay attacks

Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.13 through 9.0.18, from 8.5.38 through 8.5.100, fro...

6.6AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder