MiracleLinux 7 : tomcat-7.0.69-12.el7 (AXSA:2017-1748:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1748:02 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Ja...

Apache Tomcat 9.0.0.M1 < 9.0.0.M21

The version of Tomcat installed on the remote host is prior to 9.0.0.M21. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.0.m21security-9 advisory. - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an err...

Apache Tomcat 7.0.0 < 7.0.78

The version of Tomcat installed on the remote host is prior to 7.0.78. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.78security-7 advisory. - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error pag...

io.fabric8.jube.images.fabric8:tomcat (>=2.0.1, <=2.0.5), io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.0.6, <=2.2.0) +8 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.0.14, <=8.0.32)

org.apache.tomcat:tomcat MAVEN version =8.0.14, =2.0.1, =2.0.6, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m3 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5664 Source advisory: OSV:GHSA-JMVV-524F-HJ5J...

io.fabric8.jube.images.fabric8:tomcat (>=2.0.1, <=2.0.5), io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.0.6, <=2.2.0) +8 more potentially affected by CVE-2017-5664 via org.apache.tomcat:tomcat (>=8.0.14, <=8.0.32)

org.apache.tomcat:tomcat MAVEN version =8.0.14, =2.0.1, =2.0.6, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m3 Source cves: CVE-2017-5664 Source advisory: GHSA-JMVV-524F-HJ5J...

SUSE: Security Advisory (SUSE-SU-2018:1847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology

Summary The Jazz Team Server is shipped with/or supports versions of the Apache Tomcat web server which contain security vulnerabilities that could potentially impact the following IBM Rational products deployed on Apache Tomcat: Collaborative Lifecycle Management CLM, Rational DOORS Next...

SUSE: Security Advisory (SUSE-SU-2017:3039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3059-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Integration Bus is affected by a Open Source Apache Tomcat Vulnerability (CVE-2017-5664 )

Summary IBM Integration Bus has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2017-5664 DESCRIPTION: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by the improper handling of specific HTTP request methods for static error pages by t...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1419)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76,...

Virtuozzo 6 : tomcat6 / tomcat6-admin-webapps / etc (VZLSA-2017-3080)

An update for tomcat6 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 6 / 7 : Red Hat JBoss Web Server 3.1.0 Service Pack 1 (RHSA-2017:1801)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1801 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...

Security Bulletin: Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerability (CVE-2017-5664)

Summary Apache Tomcat is vulnerable to a security issue affecting the Rational Test Control Panel component in IBM Rational Test Workbench and Rational Test Virtualization Server. Vulnerability Details CVE-ID: CVE-2017-5664 Description: Apache Tomcat could allow a remote attacker to bypass securi...

Security Bulletin: Security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Insight

Summary Jazz Reporting Service is shipped as a component of Rational Insight. Information about security vulnerabilities affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2016-8745 DESCRIPTION: Apache Tomcat could allow a remote attacker ...