ROOT-APP-MAVEN-CVE-2025-55752 CVE-2025-55752 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-55752 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-48988 CVE-2025-48988 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-48988 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-50379 CVE-2024-50379 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2024-50379 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2023-46589 CVE-2023-46589 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2023-46589 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-49125 CVE-2025-49125 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-49125 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-49124 CVE-2025-49124 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-49124 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-61795 CVE-2025-61795 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-61795 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-31651 CVE-2025-31651 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-31651 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-56337 CVE-2024-56337 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2024-56337 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-24813 CVE-2025-24813 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2025-24813 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-52316 CVE-2024-52316 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2024-52316 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

Missing Critical Step in Authentication

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Missing Critical Step in Authentication in the JNDIRealm authentication process when configured with a non-GSSAPI SASL mechanism. An...

Not Failing Securely ('Failing Open')

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' due to the OpenSSLLifecycleListener process. An attacker can cause the application to operate in...

Buffer Under-read

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Buffer Under-read in the AJP process. An attacker can cause the response body to be split between requests, potentially leading to...

com.github.psi-probe:psi-probe-tomcat11 (>=5.1.1, <=5.5.0), com.github.waffle:waffle-tomcat11 (>=3.5.0, <=3.7.0) +72 more potentially affected by CVE-2026-103119 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m25, <=11.0.26)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m25, =5.1.1, =3.5.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-103119 Source advisory: MEND:CVE-2026-103119...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.5.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.7.0) +72 more potentially affected by CVE-2026-101296 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.26)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-101296 Source advisory: MEND:CVE-2026-101296...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), com.finture.bpm:flowee-bpms-engine (>=1.0.0, <=1.0.1) +98 more potentially affected by CVE-2026-74048 via org.apache.tomcat:tomcat-catalina (>=10.1.23, <=10.1.60)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.23, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.4.0, =20260429, =20260429, =2.11.1, =0.2.2, =3.0.0-beta-2, =1.0.0, =2.1.0 and more Source cves: CVE-2026-74048 Source advisory: MEND:CVE-2026-74048...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.5.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.7.0) +72 more potentially affected by CVE-2026-74048 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m14, <=11.0.26)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m14, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.1.0 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-74048 Source advisory: MEND:CVE-2026-74048...

com.github.jspxnet:jspx-framework (>=6.79, <=6.84), com.github.psi-probe:psi-probe-core (>=4.3.1, <=4.7.0) +37 more potentially affected by CVE-2026-74048 via org.apache.tomcat:tomcat-catalina (>=9.0.93, <=9.0.122)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.93, =6.79, =4.3.1, =4.3.1, =3.5.0, =10.0.0, =3.0.96, =3.0.96, =3.0.96, =0.1.2, =3.0.0-rc-1, =1.7.1, =1.7.2 and more Source cves: CVE-2026-74048 Source advisory: MEND:CVE-2026-74048...

Improper Authorization org.apache.tomcat:tomcat-catalina Dependency in Crowd Data Center

This Critical severity Improper Authorization vulnerability was introduced in version 7.2.0 of Crowd Data Center. This Improper Authorization vulnerability, with a CVSS Score of 9.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N allows an unauthenticated attacker to expose asse...