Alta
CVE-2022-45143
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 77
Restablecer filtros
Alta
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header
Media
CVE-2014-0095
Denial of service in Apache Tomcat
Alta
Explotada en ataques
CVE-2017-12617
Unrestricted Upload of File with Dangerous Type Apache Tomcat
Crítica
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
Crítica
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Media
CVE-2008-1947
Apache Tomcat Cross-site scripting (XSS) vulnerability
Alta
CVE-2020-11996
Uncontrolled Resource Consumption in Apache Tomcat
Alta
CVE-2021-25122
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Media
CVE-2021-24122
Information Disclosure in Apache Tomcat
Alta
CVE-2021-25329
Potential remote code execution in Apache Tomcat
Crítica
Explotada en ataques
CVE-2020-1938
Improper Privilege Management in Tomcat
Alta
CVE-2019-0199
Apache Tomcat Denial of Service vulnerability
Alta
CVE-2020-9484
Potential remote code execution in Apache Tomcat
Media
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat
Media
CVE-2020-1935
Potential HTTP request smuggling in Apache Tomcat
Alta
CVE-2019-12418
Insufficiently Protected Credentials in Apache Tomcat
Alta
CVE-2019-17563
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
Alta
CVE-2019-10072
Improper Locking in Apache Tomcat
Media
CVE-2019-0221
Cross-site scripting in Apache Tomcat
Alta
CVE-2019-0232
Apache Tomcat OS Command Injection vulnerability
Media
CVE-2018-8037
Apache Tomcat Race Condition vulnerability
Alta
CVE-2018-8034
The host name verification missing in Apache Tomcat
Crítica
CVE-2018-8014
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.