maven

org.apache.tomcat.embed:tomcat-embed-core

74 Total advisories

74 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.apache.tomcat.embed:tomcat-embed-core is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.apache.tomcat.embed:tomcat-embed-core

Vulnerabilities

Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability

Apache Tomcat Session Fixation vulnerability

Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector

Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

Apache Commons FileUpload denial of service vulnerability

Cross-site scripting in Apache Tomcat

Apache Tomcat Improper Input Validation vulnerability

Apache Tomcat Incomplete Cleanup vulnerability

Apache Tomcat - Client certificate verification bypass

Uncontrolled Resource Consumption in Apache Tomcat

Apache Tomcat Open Redirect vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Apache Tomcat - Security constraints not correctly applied

Apache Tomcat - AJP secret compared in non-constant time

Apache Tomcat: Configured cipher preference order not preserved

Apache Tomcat has an HTTP Request/Response Smuggling vulnerability

Potential remote code execution in Apache Tomcat

Apache Tomcat Denial of Service vulnerability

HTTP/2 Stream Cancellation Attack

Apache Tomcat - HTTP/2 request headers not validated

Apache Tomcat - WebSocket authentication header exposure

Apache Tomcat - Digest authenticator will authenticate any unknown user

Apache Tomcat: LockOutRealm treats user names as case-sensitive

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Potential HTTP request smuggling in Apache Tomcat

Improper Privilege Management in Tomcat

Apache Tomcat Vulnerable to Relative Path Traversal

Apache Tomcat Improper Resource Shutdown or Release vulnerability

Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences

Apache Tomcat Vulnerable to Improper Resource Shutdown or Release

Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve

Apache Tomcat has an Open Redirect vulnerability

Apache Tomcat has an Improper Input Validation vulnerability

Apache Tomcat - Fix for CVE-2023-24998 was incomplete

Apache Tomcat has an Improper Input Validation vulnerability

Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits

Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams

Potential remote code execution in Apache Tomcat

Insufficiently Protected Credentials in Apache Tomcat

Apache Tomcat - CGI security constraint bypass

Apache Tomcat Improper Input Validation vulnerability

In Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attack

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Apache Tomcat - Security constraint bypass for pre/post-resources

Apache Tomcat Rewrite rule bypass

Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests

Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Apache Tomcat - DoS in multipart upload

Apache Tomcat Denial of Service via invalid HTTP priority header

Information Disclosure in Apache Tomcat

Apache Tomcat - Denial of Service

Apache Tomcat installer for Windows has an untrusted search path vulnerability

When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server

Unrestricted Upload of File with Dangerous Type Apache Tomcat

Apache Tomcat Cross-site scripting (XSS) vulnerability

Apache Tomcat Request and/or response mix-up

Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core

Apache Tomcat information exposure vulnerability

Apache Tomcat unauthorized access vulnerability

Denial of service in Apache Tomcat

The host name verification missing in Apache Tomcat

Apache Tomcat vulnerable to information leak

Apache Tomcat improperly escapes input from JsonErrorReportValve

Apache Tomcat may reject request containing invalid Content-Length header

Expected Behavior Violation in Apache Tomcat

Exposure of Resource to Wrong Sphere in Apache Tomcat

Apache Tomcat OS Command Injection vulnerability

In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder

The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins

Improper Locking in Apache Tomcat

Apache Tomcat Race Condition vulnerability

Apache Tomcat Open Redirect vulnerability

Potential HTTP request smuggling in Apache Tomcat

Browse more Maven advisories

Start Securing