| CVE-2026-34483 |
Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-32990 |
Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-29146 |
Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-29145 |
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-29129 |
Configured cipher preference order not preserved vulnerability in Apache Tomcat
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-25854 |
Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-24880 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-24734 |
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat
|
Not rated
|
Feb 17, 2026 |
| CVE-2026-24733 |
Improper Input Validation vulnerability in Apache Tomcat
|
Not rated
|
Feb 17, 2026 |
| CVE-2025-66614 |
Improper Input Validation vulnerability
|
Not rated
|
Feb 17, 2026 |
| CVE-2025-61795 |
Improper Resource Shutdown or Release vulnerability in Apache Tomcat
|
Not rated
|
Oct 27, 2025 |
| CVE-2025-55752 |
Relative Path Traversal vulnerability in Apache Tomcat
|
Not rated
|
Oct 27, 2025 |
| CVE-2025-55754 |
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat
|
Not rated
|
Oct 27, 2025 |
| CVE-2025-55668 |
Session Fixation vulnerability in Apache Tomcat via rewrite valve
|
Not rated
|
Aug 13, 2025 |
| CVE-2025-48989 |
Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack
|
Not rated
|
Aug 13, 2025 |
| CVE-2025-53506 |
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial…
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-52520 |
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a…
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-52434 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache…
|
Not rated
|
Jul 10, 2025 |
| CVE-2025-49124 |
Untrusted Search Path vulnerability in Apache Tomcat installer for Windows
|
Not rated
|
Jun 16, 2025 |
| CVE-2025-49125 |
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or…
|
Not rated
|
Jun 16, 2025 |
| CVE-2025-48988 |
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat
|
Not rated
|
Jun 16, 2025 |
| CVE-2025-46701 |
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass…
|
Not rated
|
May 29, 2025 |
| CVE-2025-31651 |
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely…
|
Not rated
|
Apr 28, 2025 |
| CVE-2025-31650 |
Improper Input Validation vulnerability in Apache Tomcat
|
Not rated
|
Apr 28, 2025 |
| CVE-2025-24813 |
Exploited
Apache Tomcat Path Equivalence Vulnerability
|
Not rated
|
Mar 10, 2025 |