tomcat9

3 results · Clear filters · Feed

• Low 3.7
  CVE-2026-77756

  Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests

  Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  Sep 23, 2026
• Low 3.7
  CVE-2026-43514

  Apache Tomcat: AJP secret compared in non-constant time

  Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 thr…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  May 12, 2026
• Low 3.7
  CVE-2021-43980

  Apache Tomcat: Information disclosure

  The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Sep 28, 2022