Improper Authentication

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a...

CVE-2021-47698

Summary: CVE-2021-47698 affects Nagios XI versions prior to 5.8.7 that embed Nagios Core. The vulnerability is a cross-site scripting (XSS) flaw in the Core UI Views URL handling (escape_string()), caused by insufficient validation/escaping of user-supplied input. Impact per sources: could allow ...

Improper Cleanup on Thrown Exception

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Cleanup on Thrown Exception when handling failed HTTP/2 requests with certain invalid HTTP priority headers. An attacker can trigger an...