Cisco HyperFlex HX Data Platform - Arbitrary File Upload Detection

Cisco HyperFlex HX Data Platform contains an arbitrary file upload vulnerability in the web-based management interface. An attacker can send a specific HTTP request to an affected device, thus enabling upload of files to the affected device with the permissions of the tomcat8 user. !/usr/bin/env...

com.linecorp.armeria:armeria-tomcat8 (>=1.26.0, <=1.26.4), org.apache.ranger:embeddedwebserver (2.5.0) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.94)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.94 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8 =1.26.0, =1.26.4 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.linecorp.armeria:armeria-tomcat8 (>=1.26.0, <=1.26.4), org.apache.ranger:embeddedwebserver (2.5.0) +7 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.94)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.94 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8 =1.26.0, =1.26.4 -...

com.github.psi-probe:psi-probe-tomcat8 (3.1.0), com.github.waffle:waffle-tomcat8 (1.9.1) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.52)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.1.0 - com.github.waffle:waffle-tomcat8 1.9.1 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7.4), org.apache.tomcat:tomcat-catalina-ha (8.0.22) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.22)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.4 - org.apache.tomcat:tomcat-catalina-ha 8.0.22 ...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

org.apache.tomcat:tomcat-catalina-ha (8.0.14), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.14) +8 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.14)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.14 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.dblock.waffle:waffle-tomcat8 (1.7.4), org.apache.tomcat:tomcat-catalina-ha (8.0.22) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.22)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.4 - org.apache.tomcat:tomcat-catalina-ha 8.0.22 ...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0), com.github.waffle:waffle-tomcat8 (1.9.0) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.51)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0 - com.github.waffle:waffle-tomcat8 1.9.0 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7), org.apache.tomcat:tomcat-catalina-ha (8.0.12) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7 - org.apache.tomcat:tomcat-catalina-ha 8.0.12 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7), org.apache.tomcat:tomcat-catalina-ha (8.0.12) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7 - org.apache.tomcat:tomcat-catalina-ha 8.0.12 -...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0.rc2), ml.alternet:alternet-security-tomcat-8.0 (1.0) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.45)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0.rc2 - ml.alternet:alternet-security-tomcat-8.0...

com.spatineo:geoserver-tomcat8-valve (1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.46) +10 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.46)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.spatineo:geoserver-tomcat8-valve 1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.46 -...

com.spatineo:geoserver-tomcat8-valve (1.0), org.apache.tomcat:tomcat-catalina-ha (8.5.46) +10 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.46)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.spatineo:geoserver-tomcat8-valve 1.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.46 -...

org.apache.cxf.fediz:fediz-tomcat8 (>=1.4.0, <=1.4.1), org.apache.tomcat:tomcat-catalina-ha (8.5.12) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.12)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz:fediz-tomcat8 =1.4.0, =1.4.1 - org.apache.tomcat:tomcat-catalina-ha...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0.rc2), ml.alternet:alternet-security-tomcat-8.0 (1.0) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.45)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0.rc2 - ml.alternet:alternet-security-tomcat-8.0...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0), com.github.waffle:waffle-tomcat8 (1.9.0) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.51)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0 - com.github.waffle:waffle-tomcat8 1.9.0 -...

com.github.psi-probe:psi-probe-tomcat8 (3.0.0.rc2), ml.alternet:alternet-security-tomcat-8.0 (1.0) +7 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.45)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.0.0.rc2 - ml.alternet:alternet-security-tomcat-8.0...