Oracle Siebel Server (October 2019 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the October 2019 CPU advisory. - Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM component: Customizable Prod/Configurator Apache Tomcat. Supported versions that a...

CVE-2018-8037

creationtimestamp| type| source ---|---|--- 2024-01-15 13:36:44+00:00| seen| https://t.me/ctinow/168335...

K98776835: Apache Tomcat vulnerability - CVE-2018-8037

Security Advisory Description If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NIO and NI...

SUSE: Security Advisory (SUSE-SU-2018:3011-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : pki-deps:10.6 (CESA-2019:1529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1529 advisory. - tomcat: Open redirect in default servlet CVE-2018-11784 - tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins...

Important: Red Hat Security Advisory: pki-deps:10.6 security update

An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALSA-2019:1529 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Deps module contains fundamental packages required as dependencies for the pki-core module by AlmaLinux Certificate System. Security Fixes: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up CVE-2018-8037 tomcat: Insecure...

Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Deps module contains fundamental packages required as dependencies for the pki-core module by AlmaLinux Certificate System. Security Fixes: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up CVE-2018-8037 tomcat: Insecure...

Apache Tomcat 8.5.x < 8.5.32 Multiple Vulnerabilities

Binary data 700695.pasl...

Apache Tomcat 9.0.x < 9.0.10 Security Misconfiguration

Binary data 700707.pasl...

Fedora Update for tomcat FEDORA-2018-b18f9dd65b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : tomcat (openSUSE-2019-770)

This update for tomcat to version 9.0.10 fixes the following issues : Security issues fixed : - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Service bsc1102400. -...

Fedora 28 : 1:tomcat (2018-b1832101b8)

This update includes a rebase from 8.5.30 up to 8.5.32 which resolves two CVEs along with various other bugs/features : - rhbz1579612 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins - rhbz1607586 CVE-2018-8034 tomcat: host name verification...

Security Bulletin: Apache Tomcat as used in IBM QRadar SIEM is vulnerable to publicly disclosed vulnerability. (CVE-2018-8034, CVE-2018-8037)

Summary Publicly disclosed vulnerabilities in Apache Tomcat. Vulnerability Details CVEID: CVE-2018-8034 Description: Apache Tomcat could allow a remote attacker to bypass security restrictions, caused by a missing host name verification when using TLS with the WebSocket client. An attacker could...

com.brienwheeler.apps:apps-tomcat (>=1.10, <=1.11), com.brienwheeler.dist:dist-tomcat (>=1.10, <=1.11) +19 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m9, <=9.0.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m9, =1.10, =1.10, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =0.60.0, =0.60.0, =1.6-beta.2, =5.0.5, =1.2, =9.0.0.m9, =9.0.0.m9, =9.0.8 and more Source cves: CVE-2018-8037 Source advisory: OSV:GHSA-6V52-MJ5R-7J2M...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +2935 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.5, <=8.5.31)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.5, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =0.2.0, =1.0.3, =0.2.1, =0.1.1, =0.1.1, =0.7, =0.8 and more Source cves: CVE-2018-8037 Source advisory: OSV:GHSA-6V52-MJ5R-7J2M...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +2935 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.5, <=8.5.31)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.5, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =0.2.0, =1.0.3, =0.2.1, =0.1.1, =0.1.1, =0.7, =0.8 and more Source cves: CVE-2018-8037 Source advisory: GHSA-6V52-MJ5R-7J2M...

com.brienwheeler.apps:apps-tomcat (>=1.10, <=1.11), com.brienwheeler.dist:dist-tomcat (>=1.10, <=1.11) +19 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m9, <=9.0.8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m9, =1.10, =1.10, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =9.0.8.0, =0.60.0, =0.60.0, =1.6-beta.2, =5.0.5, =1.2, =9.0.0.m9, =9.0.0.m9, =9.0.8 and more Source cves: CVE-2018-8037 Source advisory: GHSA-6V52-MJ5R-7J2M...