| CVE-2026-86247 |
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification…
|
Not rated
|
Sep 23, 2026 |
| CVE-2026-86246 |
Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure…
|
Not rated
|
Sep 23, 2026 |
| CVE-2026-86243 |
Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a…
|
Not rated
|
Sep 23, 2026 |
| CVE-2026-29145 |
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-24734 |
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat
|
Not rated
|
Feb 17, 2026 |
| CVE-2018-8020 |
Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced…
|
Not rated
|
Jul 31, 2018 |
| CVE-2018-8019 |
When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle…
|
Not rated
|
Jul 31, 2018 |
| CVE-2017-15698 |
When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and…
|
Not rated
|
Jan 31, 2018 |