tomcat10

7 results · Clear filters · Feed

• Medium 6.1
  CVE-2026-50229 Public exploit

  Apache Tomcat: XSS in number guess example

  Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through …

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jun 29, 2026
• Medium 6.1
  CVE-2026-25854 Public exploit

  Apache Tomcat: Occasionally open redirect

  Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M23 through 9.0.115, …

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Apr 9, 2026
• Medium 6.5
  CVE-2026-24733 Public exploit

  Apache Tomcat: Security constraint bypass with HTTP/0.9

  Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, the user could bypass that constraint on GET req…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
  Feb 17, 2026
• Medium 6.5
  CVE-2025-55668 Public exploit

  Apache Tomcat: session fixation via rewrite valve

  Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended …

  Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  Aug 13, 2025
• Medium 6.1
  CVE-2024-52318 Public exploit

  Apache Tomcat: Incorrect JSP tag recycling leads to XSS

  Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue.

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat10 Debian Maven
  Nov 18, 2024
• Medium 6.5
  CVE-2024-52317 Public exploit

  Apache Tomcat: Request/response mix-up with HTTP/2

  Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 throug…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat10 Debian Ubuntu Maven
  Nov 18, 2024
• Medium 6.1
  CVE-2023-41080 Public exploit

  Apache Tomcat: Open redirect with FORM authentication

  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Aug 25, 2023