Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownApache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Oct 14, 2026
- Critical9.1Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat.Check if you run itEPSS 1.22%May 12, 2026
- Low3.7Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat.Check if you run itEPSS 0.53%May 12, 2026
- High7.5Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat.Check if you run itEPSS 0.50%May 12, 2026
- Critical9.8DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.Check if you run itEPSS 1.33%May 12, 2026
- High7.3Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat.Check if you run itEPSS 0.65%May 12, 2026
- Critical9.8Improper Input Validation vulnerability in Apache Tomcat.Check if you run itEPSS 1.68%May 12, 2026
- High7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.Check if you run itEPSS 0.86%May 12, 2026
- High8.2OpenMRS Core is an open source electronic medical record system platform.Check if you run itEPSS 0.72%May 5, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Check if you run itEPSS 0.45%Apr 9, 2026
- High7.5Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token.Check if you run itEPSS 0.45%Apr 9, 2026
- High7.5Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat.Check if you run itEPSS 0.46%Apr 9, 2026
- Medium5.3Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.Check if you run itEPSS 0.56%Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.Check if you run itEPSS 2.89%Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Check if you run itEPSS 0.71%Apr 9, 2026
- High7.5Configured cipher preference order not preserved vulnerability in Apache Tomcat.Check if you run itEPSS 0.37%Apr 9, 2026
- Medium6.1Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.Check if you run itEPSS 0.53%Apr 9, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.Check if you run itEPSS 0.68%Apr 9, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatch nowKEVEPSS 6.56%Apr 9, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application.Check if you run itEPSS 0.79%Mar 16, 2026
- High7.3Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component ofCheck if you run itEPSS 2.93%May 29, 2025
- Critical9.8Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.Check if you run itEPSS 4.19%Apr 28, 2025
- High7.5Improper Input Validation vulnerability in Apache Tomcat.Check this weekEPSS 61.32%Apr 28, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.93%Mar 10, 2025
- UnknownApache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.65%Dec 19, 2023
57 records · page 1 of 3
PreviousNext