org.apache.tomcat:tomcat-coyote

4 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-24733 Public exploit

  Apache Tomcat: Security constraint bypass with HTTP/0.9

  Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, the user could bypass that constraint on GET req…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Feb 17, 2026
• Medium 6.5
  CVE-2024-52317 Public exploit

  Apache Tomcat: Request/response mix-up with HTTP/2

  Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 throug…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat10 Debian Ubuntu Maven
  Nov 18, 2024
• Medium 5.3
  CVE-2024-21733 Public exploit EPSS 14%

  Apache Tomcat: Leaking of unrelated request bodies in default error page

  Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Other, EOL versions may also be affected. Users are recommended to upgrade …

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Jan 19, 2024
• Medium —
  CVE-2014-0075 Public exploit EPSS 18%

  Integer Overflow or Wraparound in Apache Tomcat

  Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service (resource consumpti…

  org.apache.tomcat:tomcat tomcat7 tomcat6 org.apache.tomcat:tomcat-coyote Ubuntu Maven
  May 31, 2014