Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to denial-of-service due to use of Apache Commons File Upload within IBM WebSphere Application Server Liberty

Summary This security bulletin addresses the vulnerabilitiy in IBM Tivoli Application Dependency Discovery Manager due to Apache Commons File Upload used in IBM WebSphere Application Server Liberty that is vulnerable to a denial of service CVE-2025-48976 Vulnerability Details CVEID:CVE-2025-48976...

RHEL 10 : tomcat (RHSA-2025:14179)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14179 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: tomcat: Apache Tomcat DoS...

Security Bulletin: Content Manager Services for Lotus Quickr (CVE-2016-3092)

Summary IBM Lotus Quickr Connectors bundled in IBM Content Navigator's Collaboration Services is affected by an Apache Commons File Upload vulnerability. IBM Lotus Quickr has resolved this vulnerability Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION:Apache Tomcat is vulnerable to a denial...

Security Bulletin: Security vulnerability in Apache Commons File Upload affects IBM Rational Quality Manager (CVE-2014-0050)

Summary IBM Rational Quality Manage ships with the Apache Commons File Upload library which contains a security vulnerability that could potentially be exploited to cause a denial of service attack. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...

Oracle WebLogic Server Java Object Deserialization RCE (October 2016 CPU)

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WLS Security component due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons File Upload library. An unauthenticated, remote attacker can exploit this, via a crafted a...

Oracle WebLogic Portal Apache Commons File Upload (January 2016 CPU)

Binary data oracleweblogicportalcpujan2016.nbin...

Fixed in Apache Tomcat 7.0.40

Moderate: Information disclosure CVE-2013-2071 Bug 54178 described a scenario where elements of a previous request may be exposed to a current request. This was very difficult to exploit deliberately but fairly likely to happen unexpectedly if an application used AsyncListeners that threw...