240 matches found
Astra Linux – vulnerability in Tomcat9
Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication ServerAuthContext component, which may throw an exception during the authentication process without explicitly setting an HTTP status indicating failure, the authentication may...
Rocky Linux 10.0 [CIQ] Security Update: tomcat9 / tomcat9-admin-webapps / tomcat9-docs-webapp / etc (crlsa-2025_7494)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257494 advisory. tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813 Tenable has extracted the preceding description...
tomcat9 security update
An update is available for tomcat9. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tomcat is the servlet container that is used in the official Reference...
RockyLinux 10 : tomcat9 (RLSA-2026:68651)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68651 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...
AlmaLinux 10 : tomcat9 (ALSA-2026:68651)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:68651 advisory. Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 tomcat-coyote: Apache Tomcat: Authentication...
CLEANSTART-2026-EU30316 Security fix for CVE-2022-34305 applied in: tomcat10 9.0.64-r0, tomcat11 9.0.64-r0, tomcat9 9.0.64-r0
CVE-2022-34305 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UA26189 Security fix for GHSA-8mc5-53m5-3qj2 applied in: tomcat9 9.0.115-r0
Security vulnerability affects the tomcat9 package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AM77386 Security fix for CVE-2026-32990 applied in: tomcat9 9.0.115-r0
Security vulnerability affects the tomcat9 package. This issue is resolved in later releases. See references for vulnerability details...
Moderate: Red Hat Security Advisory: tomcat9 security update
An update for tomcat9 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
tomcat9 security update
1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...
PT-2026-101809
Security vulnerability affects the tomcat9 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100095
Security vulnerability affects the tomcat9 package. This issue is resolved in later releases. See references for vulnerability details...
Oracle Linux 10 : tomcat9 (ELSA-2026-68651)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-68651 advisory. - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2...
Important: Red Hat Security Advisory: tomcat9 security update
An update for tomcat9 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
RHEL 10 : tomcat9 (RHSA-2026:67163)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67163 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...
com.github.hazendaz.tomcat:tomcat9-config (>=9.0.39, <=9.0.120), org.apache.tomee:apache-tomee (>=8.0.5, <=8.0.16) +9 more potentially affected by CVE-2026-68763 via org.apache.tomcat:tomcat (>=9.0.39, <=9.0.120)
org.apache.tomcat:tomcat MAVEN version =9.0.39, =9.0.39, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =5.23.8, =8.0.0, =10.1.1 Source cves: CVE-2026-68763 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20304756...
CLEANSTART-2026-OJ84385 Security fixes in tomcat9 9.0.70-r0
Package tomcat9 version 9.0.70-r0 fixes 1 vulnerabilities: CVE-2022-45143...
CLEANSTART-2026-IK14021 Security fixes in tomcat9 9.0.58-r0
Package tomcat9 version 9.0.58-r0 fixes 1 vulnerabilities: CVE-2022-23181...
com.github.hazendaz.tomcat:tomcat9-config (>=9.0.89, <=9.0.120), org.ops4j.pax.web:pax-web-spi (>=8.0.28, <=10.1.1) potentially affected by CVE-2026-66299 via org.apache.tomcat:tomcat (>=9.0.89, <=9.0.120)
org.apache.tomcat:tomcat MAVEN version =9.0.89, =9.0.89, =8.0.28, =10.1.1 Source cves: CVE-2026-66299 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19346746...