Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 213
Reset filtersApache Tomcat is vulnerable to HTTP request-smuggling
Apache Tomcat Denial of Service vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Improper Input Validation in Apache Tomcat
Improper Authentication in Apache Tomcat
Integer Overflow or Wraparound in Apache Tomcat
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
Missing XML Validation in Apache Tomcat
Improper Input Validation in Apache Tomcat
Improper Input Validation in Apache Tomcat
Uncontrolled Resource Consumption in Apache Tomcat
Improper Access Control in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Improper Access Control in Apache Tomcat
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
Inconsistent documentation in Apache Tomcat
Insufficient Verification of Data Authenticity in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.