Exposición de Apache Tomcat

Web servers
501
score de exposición
13.840
sitios usan
6
en explotación
34
críticos

CVEs

174 resultados
CVE-2026-43515CRITICALApache Tomcat: Security constraints not correctly appliedEPSS 1.2%CVE-2019-12418—When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacEPSS 1.2%CVE-2023-34981HIGHApache Tomcat: AJP response header mix-upEPSS 1.1%CVE-2025-55668MEDIUMApache Tomcat: session fixation via rewrite valveEPSS 0.9%CVE-2026-41284HIGHApache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handlingEPSS 0.8%CVE-2026-65905CRITICALApache Tomcat: Limited replay attack possible with DIGEST authenticationEPSS 0.8%CVE-2026-65637CRITICALApache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incompleteEPSS 0.8%CVE-2026-68763HIGHApache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is resetEPSS 0.7%CVE-2026-29145CRITICALApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabledEPSS 0.7%CVE-2026-24880HIGHApache Tomcat: Request smuggling via invalid chunk extensionEPSS 0.7%CVE-2026-53404HIGHApache Tomcat: Bad ornext processing in RewriteValveEPSS 0.7%CVE-2026-55956MEDIUMApache Tomcat: Security constraints for default servlet ignored methodEPSS 0.7%CVE-2022-23181—Local privilege escalation with FileStoreEPSS 0.7%CVE-2026-42498HIGHApache Tomcat: WebSocket authentication header exposureEPSS 0.7%CVE-2026-65927HIGHApache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access controlEPSS 0.7%CVE-2026-77791HIGHApache Tomcat: DoS via busy wait during WebSocket closeEPSS 0.7%CVE-2026-65182CRITICALApache Tomcat: Bypass longest prefix security constraintEPSS 0.7%CVE-2026-68525CRITICALApache Tomcat: Redirect after FORM auth may bypass method specific constraintsEPSS 0.6%CVE-2026-101296CRITICALApache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanismsEPSS 0.6%CVE-2026-55276CRITICALApache Tomcat: Logged effective web.xml is incompleteEPSS 0.6%