Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 213
Reset filtersApache Tomcat Improper Input Validation vulnerability
Apache Tomcat Improper Input Validation vulnerability
HTTP/2 Stream Cancellation Attack
Apache Tomcat Incomplete Cleanup vulnerability
Apache Tomcat Incomplete Cleanup vulnerability
Apache Tomcat Open Redirect vulnerability
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Apache Tomcat vulnerable to information leak
Apache Tomcat vulnerable to Unprotected Transport of Credentials
Apache Commons FileUpload denial of service vulnerability
Apache Tomcat improperly escapes input from JsonErrorReportValve
Apache Tomcat may reject request containing invalid Content-Length header
Apache Tomcat Race Condition vulnerability
Cross-site Scripting in Apache Tomcat
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
Deserialization of Untrusted Data in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat Allows Replacing of XML Parser
Apache Tomcat does not follow ServletSecurity annotations
Improper Authentication in Apache Tomcat
Improper Authentication in Apache Tomcat
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
Authentication Bypass in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.