io.fabric8.funktion.connector:connector-linkedin (>=1.1.9, <=1.1.55), io.fabric8.funktion.connector:connector-servicenow (>=1.1.9, <=1.1.55) +27 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - io.fabric8.funktion.connector:connector-linkedin =1.1.9, =1.1.9, =1.1.55 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

com.cloudera.oryx:oryx-lambda-serving (2.3.0), com.github.waffle:waffle-tomcat85 (1.8.3) +32 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.11)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.cloudera.oryx:oryx-lambda-serving 2.3.0 - com.github.waffle:waffle-tomcat85 1.8.3 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.1), org.apache.tomcat:tomcat-catalina-ha (8.5.57) +28 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.57)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.57 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.1 - org.apache.tomcat:tomcat-catalina-ha 8.5.57 ...

net.myrrix:myrrix-web (0.9), net.myrrix:myrrix-web-common (0.9) +26 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.34)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.9 - net.myrrix:myrrix-web-common 0.9 -...

net.myrrix:myrrix-web (0.7), org.apache.geode:geode-modules-tomcat7 (>=1.0.0-incubating.m2, <=1.0.0-incubating.m3) +30 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.30)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.7 - org.apache.geode:geode-modules-tomcat7 =1.0.0-incubating.m2,...

de.metalcon.utils:form-item-list (1.0.0), org.apache.marmotta:marmotta-splash (>=3.0.0-incubating, <=3.0.1) +27 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.37)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.metalcon.utils:form-item-list 1.0.0 - org.apache.marmotta:marmotta-splash...

org.apache.tomcat:tomcat-catalina (8.5.2), org.apache.tomcat:tomcat-catalina-ha (8.5.2) +29 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.2)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - org.apache.tomcat:tomcat-catalina 8.5.2 - org.apache.tomcat:tomcat-catalina-ha 8.5.2 -...

com.github.psi-probe:psi-probe-tomcat85 (3.5.1), org.apache.tomcat:tomcat-catalina (8.5.57) +29 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.57)

org.apache.tomcat:tomcat-coyote MAVEN version 8.5.57 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.1 - org.apache.tomcat:tomcat-catalina 8.5.57 -...

CVE-2020-11969

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 -...

org.apache.ode:ode-tomee (>=1.3.7, <=1.3.8), org.apache.tomee.maven:tomee-embedded-maven-plugin (>=7.0.0, <=7.1.4) +17 more potentially affected by CVE-2024-23672 via org.apache.tomcat:tomcat-websocket (>=8.5.2, <=8.5.95)

org.apache.tomcat:tomcat-websocket MAVEN version =8.5.2, =1.3.7, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =1.0.10-m10, =1.3.33 and more Source cves: CVE-2024-23672 Source advisory: OSV:GHSA-V682-8VV8-VPWR...