High
CVE-2022-45143
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 77
Reset filters
High
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header
Medium
CVE-2014-0095
Denial of service in Apache Tomcat
High
Exploited in attacks
CVE-2017-12617
Unrestricted Upload of File with Dangerous Type Apache Tomcat
Critical
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
Critical
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Medium
CVE-2008-1947
Apache Tomcat Cross-site scripting (XSS) vulnerability
High
CVE-2020-11996
Uncontrolled Resource Consumption in Apache Tomcat
High
CVE-2021-25122
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Medium
CVE-2021-24122
Information Disclosure in Apache Tomcat
High
CVE-2021-25329
Potential remote code execution in Apache Tomcat
Critical
Exploited in attacks
CVE-2020-1938
Improper Privilege Management in Tomcat
High
CVE-2019-0199
Apache Tomcat Denial of Service vulnerability
High
CVE-2020-9484
Potential remote code execution in Apache Tomcat
Medium
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat
Medium
CVE-2020-1935
Potential HTTP request smuggling in Apache Tomcat
High
CVE-2019-12418
Insufficiently Protected Credentials in Apache Tomcat
High
CVE-2019-17563
In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack
High
CVE-2019-10072
Improper Locking in Apache Tomcat
Medium
CVE-2019-0221
Cross-site scripting in Apache Tomcat
High
CVE-2019-0232
Apache Tomcat OS Command Injection vulnerability
Medium
CVE-2018-8037
Apache Tomcat Race Condition vulnerability
High
CVE-2018-8034
The host name verification missing in Apache Tomcat
Critical
CVE-2018-8014
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.