Launch Week Day 1: Announcing Security Design Review
maven

org.apache.tomcat:tomcat-coyote

View on maven registry
28 Total advisories
28 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 5.3
Maven

CVE-2023-45648

Apache Tomcat Improper Input Validation vulnerability

CRITICAL 9.1
Maven

CVE-2025-66614

Apache Tomcat - Client certificate verification bypass

HIGH 7.5
Maven

CVE-2021-25122

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

HIGH 7.5
Maven

CVE-2026-29129

Apache Tomcat: Configured cipher preference order not preserved

HIGH 7.5
Maven

CVE-2026-24880

Apache Tomcat has an HTTP Request/Response Smuggling vulnerability

HIGH 7.5
Maven

CVE-2020-13934

Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat

HIGH 7.5
Maven

CVE-2019-0199

Apache Tomcat Denial of Service vulnerability

MEDIUM 5.3
SwiftURL KEV

CVE-2023-44487

HTTP/2 Stream Cancellation Attack

HIGH 7.5
Maven

CVE-2025-48989

Apache Tomcat Improper Resource Shutdown or Release vulnerability

MEDIUM 5.3
Maven

CVE-2026-32990

Apache Tomcat has an Improper Input Validation vulnerability

HIGH 7.5
Maven

CVE-2023-28709

Apache Tomcat - Fix for CVE-2023-24998 was incomplete

HIGH 7.5
Maven

CVE-2026-24734

Apache Tomcat has an Improper Input Validation vulnerability

HIGH 7.5
Maven

CVE-2025-53506

Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams

HIGH 7.5
Maven

CVE-2024-24549

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests

UNKNOWN
Maven

CVE-2025-31650

Apache Tomcat Denial of Service via invalid HTTP priority header

HIGH 7.5
Maven

CVE-2024-34750

Apache Tomcat - Denial of Service

HIGH 7.5
Maven

CVE-2023-24998

Apache Commons FileUpload denial of service vulnerability

MEDIUM 5.3
Maven

CVE-2024-21733

Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information

UNKNOWN
Maven

CVE-2014-0075

Integer Overflow or Wraparound in Apache Tomcat

MEDIUM 5.9
Maven

CVE-2023-42794

Apache Tomcat Incomplete Cleanup vulnerability

MEDIUM 6.5
Maven

CVE-2024-52317

Apache Tomcat Request and/or response mix-up

UNKNOWN
Maven

CVE-2014-0095

Denial of service in Apache Tomcat

HIGH 7.5
Maven

CVE-2023-34981

Apache Tomcat vulnerable to information leak

HIGH 7.5
Maven

CVE-2022-42252

Apache Tomcat may reject request containing invalid Content-Length header

CRITICAL 9.8
Maven

CVE-2017-5651

Expected Behavior Violation in Apache Tomcat

HIGH 7.5
Maven

CVE-2020-17527

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

HIGH 7.1
Maven

CVE-2016-6816

Improper Input Validation in Apache Tomcat

MEDIUM 4.3
Maven

CVE-2020-13943

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Ready to move

Start Securing

Free, no credit card | First findings in minutes