Crítica
CVE-2026-41293
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 35
Restablecer filtros
Media
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Media
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability
Crítica
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Alta
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved
Baja
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9
Media
CVE-2025-66614
Apache Tomcat - Client certificate verification bypass
Alta
CVE-2026-24734
Apache Tomcat has an Improper Input Validation vulnerability
Alta
CVE-2025-48989
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Alta
CVE-2025-53506
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Media
CVE-2025-52434
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
Media
CVE-2025-31650
Apache Tomcat Denial of Service via invalid HTTP priority header
Media
CVE-2024-52317
Apache Tomcat Request and/or response mix-up
Alta
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
Alta
CVE-2024-34750
Apache Tomcat - Denial of Service
Media
CVE-2024-24549
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
Media
CVE-2024-21733
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
Alta
CVE-2023-46589
Apache Tomcat Improper Input Validation vulnerability
Media
CVE-2023-45648
Apache Tomcat Improper Input Validation vulnerability
Media
Explotada en ataques
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
Media
CVE-2023-42794
Apache Tomcat Incomplete Cleanup vulnerability
Alta
CVE-2023-28709
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Alta
CVE-2023-34981
Apache Tomcat vulnerable to information leak
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.