tomcat6

7 results · Clear filters · Feed

• High 7.3
  CVE-2026-55957 Public exploit

  Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

  Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0-…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jun 29, 2026
• High 7.5
  CVE-2026-24880 Public exploit

  Apache Tomcat: Request smuggling via invalid chunk extension

  Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M1 throug…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  Apr 9, 2026
• High 7.5
  CVE-2025-48976 Public exploit EPSS 33%

  Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

  Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade…

  Apache Software Foundation Apache Commons FileUpload tomcat9 tomcat9 Debian Ubuntu Wolfi Maven
  Jun 16, 2025
• High 7.5
  CVE-2025-48988 Public exploit EPSS 30%

  Apache Tomcat: FileUpload large number of parts with headers DoS

  Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time th…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Jun 16, 2025
• High 7.3
  CVE-2025-46701 Public exploit

  Apache Tomcat: Security constraint bypass for CGI scripts

  Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  May 29, 2025
• High 7.1
  CVE-2016-6816 Public exploit EPSS 40%

  Improper Input Validation in Apache Tomcat

  The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven
  Mar 20, 2017
• High 8.8
  CVE-2016-0714 Public exploit EPSS 13%

  Improper Access Control in Apache Tomcat

  The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and…

  org.apache.tomcat:tomcat tomcat7 tomcat6 Ubuntu Maven
  Feb 25, 2016