maven

org.apache.tomcat:tomcat-catalina

39 Total advisories

39 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.apache.tomcat:tomcat-catalina is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.apache.tomcat:tomcat-catalina

Vulnerabilities

Apache Tomcat Session Fixation vulnerability

Apache Commons FileUpload denial of service vulnerability

Cross-site scripting in Apache Tomcat

Apache Tomcat Incomplete Cleanup vulnerability

Apache Tomcat Open Redirect vulnerability

Apache Tomcat - Security constraints not correctly applied

Apache Tomcat - AJP secret compared in non-constant time

Potential remote code execution in Apache Tomcat

Apache Tomcat - HTTP/2 request headers not validated

Apache Tomcat - WebSocket authentication header exposure

Apache Tomcat - Digest authenticator will authenticate any unknown user

Apache Tomcat: LockOutRealm treats user names as case-sensitive

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Apache Tomcat Vulnerable to Relative Path Traversal

Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences

Apache Tomcat Vulnerable to Improper Resource Shutdown or Release

Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve

Apache Tomcat has an Open Redirect vulnerability

Apache Tomcat vulnerable to Unprotected Transport of Credentials

Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits

Apache Tomcat - CGI security constraint bypass

Apache Tomcat Improper Input Validation vulnerability

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Apache Tomcat - Security constraint bypass for pre/post-resources

Apache Tomcat Rewrite rule bypass

Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Apache Tomcat - DoS in multipart upload

Apache Tomcat - Authentication Bypass

Apache Tomcat installer for Windows has an untrusted search path vulnerability

Unrestricted Upload of File with Dangerous Type Apache Tomcat

Apache Tomcat Improper Access Control vulnerability

Missing XML Validation in Apache Tomcat

Improper Input Validation in Apache Tomcat

Improper Authentication in Apache Tomcat

Apache Tomcat improperly escapes input from JsonErrorReportValve

Exposure of Resource to Wrong Sphere in Apache Tomcat

Improper Access Control in Apache Tomcat

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Browse more Maven advisories

Start Securing