Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 213
Reset filtersImproper Access Control in Apache Tomcat
Denial of service in Apache Tomcat
Improper Input Validation in Apache Tomcat
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
Apache Tomcat does not enforce the maxHttpHeaderSize limit
Apache Tomcat allows remote attackers to bypass intended access restrictions
Access controll bypass in Apache Tomcat
Access restriction bypass in Apache Tomcat
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Apache Tomcat has cookies without HTTPOnly flag in Set-Cookie header
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
Improper Verification of Source of a Communication Channel in Apache Tomcat
Directory Traversal in Apache Tomcat
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Improper Authentication in Apache Tomcat
Improper Authentication in Apache Tomcat
Improper Input Validation in Apache Tomcat
Insertion of Sensitive Information into Log File in Apache Tomcat
Use of Hard-coded Cryptographic Key in Apache Tomcat
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
Authentication Bypass in Apache Tomcat
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.