| CVE-2017-7674 |
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did…
|
Not rated
|
Aug 11, 2017 |
| CVE-2016-6796 |
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to…
|
Not rated
|
Aug 11, 2017 |
| CVE-2016-8745 |
A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13,…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-6817 |
The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a…
|
7.5
High
|
Aug 10, 2017 |
| CVE-2016-6797 |
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-6794 |
When a SecurityManager is configured, a web application's ability to read system properties should be controlled by…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-5018 |
In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a…
|
Not rated
|
Aug 10, 2017 |
| CVE-2016-0762 |
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0…
|
Not rated
|
Aug 10, 2017 |
| CVE-2017-5664 |
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is…
|
Not rated
|
Jun 6, 2017 |
| CVE-2017-5648 |
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to…
|
Not rated
|
Apr 17, 2017 |
| CVE-2017-5647 |
A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to…
|
Not rated
|
Apr 17, 2017 |
| CVE-2017-5651 |
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a…
|
Not rated
|
Apr 17, 2017 |
| CVE-2017-5650 |
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection…
|
Not rated
|
Apr 17, 2017 |
| CVE-2016-8735 |
Exploited
Apache Tomcat Remote Code Execution Vulnerability
|
9.8
Critical
|
Apr 6, 2017 |
| CVE-2016-6816 |
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to…
|
Not rated
|
Mar 20, 2017 |
| CVE-2016-8747 |
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in…
|
7.5
High
|
Mar 14, 2017 |