Vulnerability-Lookup

RHSA-2026:18536

Vulnerability from csaf_redhat - Published: 2026-05-19 09:00 - Updated: 2026-09-28 15:20

Summary

Red Hat Security Advisory: tomcat9 security update

Severity

Important

Notes

Topic: An update for tomcat9 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. Security Fix(es): * tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701) * org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve (CVE-2025-55668) * org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-34750

A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain open that should have been closed.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 9 products

Product	Version	Remediation
Unresolved product id: AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-38286

A vulnerability was found in Tomcat. Under certain configurations on any platform, this flaw allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Important

CVE-2025-46701

A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-178 - Improper Handling of Case Sensitivity

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Moderate

CVE-2025-55668

A session fixation vulnerability has been identified in Apache Tomcat, affecting its rewrite functionality. If the rewrite valve is enabled for a web application, an attacker can craft a specific URL. If a victim clicks on this malicious URL, their subsequent interaction with the resource will occur within the context of the attacker's session. This could allow an attacker to hijack the victim's session and perform actions on their behalf.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-384 - Session Fixation

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Moderate

CVE-2025-55754

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems.

3.5 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Moderate

CVE-2025-61795

A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Moderate

CVE-2026-55957

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct password, leading to unauthorized access.

7.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-305 - Authentication Bypass by Primary Weakness

Affected products

Fixed 9 products, the same list as for CVE-2024-34750

Threats

Impact Important

References

49 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:18536	self
https://docs.redhat.com/en/documentation/red_hat_…	external
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2369253	external
https://bugzilla.redhat.com/show_bug.cgi?id=2388226	external
https://bugzilla.redhat.com/show_bug.cgi?id=2406590	external
https://issues.redhat.com/browse/RHEL-148687	external
https://issues.redhat.com/browse/RHEL-158962	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-34750	self
https://bugzilla.redhat.com/show_bug.cgi?id=2295651	external
https://www.cve.org/CVERecord?id=CVE-2024-34750	external
https://nvd.nist.gov/vuln/detail/CVE-2024-34750	external
https://lists.apache.org/thread/4kqf0bc9gxymjc2x7…	external
https://access.redhat.com/security/cve/CVE-2024-38286	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314686	external
https://www.cve.org/CVERecord?id=CVE-2024-38286	external
https://nvd.nist.gov/vuln/detail/CVE-2024-38286	external
https://lists.apache.org/thread/wms60cvbsz3fpbz9p…	external
https://access.redhat.com/security/cve/CVE-2025-46701	self
https://bugzilla.redhat.com/show_bug.cgi?id=2369253	external
https://www.cve.org/CVERecord?id=CVE-2025-46701	external
https://nvd.nist.gov/vuln/detail/CVE-2025-46701	external
https://lists.apache.org/thread/xhqqk9w5q45srcdqh…	external
https://access.redhat.com/security/cve/CVE-2025-55668	self
https://bugzilla.redhat.com/show_bug.cgi?id=2388226	external
https://www.cve.org/CVERecord?id=CVE-2025-55668	external
https://nvd.nist.gov/vuln/detail/CVE-2025-55668	external
https://github.com/apache/tomcat/commit/8621e4c6b…	external
https://github.com/apache/tomcat/commit/90306d971…	external
https://github.com/apache/tomcat/commit/9c3673ba0…	external
https://lists.apache.org/thread/v6bknr96rl7l1qxkl…	external
https://access.redhat.com/security/cve/CVE-2025-55754	self
https://bugzilla.redhat.com/show_bug.cgi?id=2406590	external
https://www.cve.org/CVERecord?id=CVE-2025-55754	external
https://nvd.nist.gov/vuln/detail/CVE-2025-55754	external
https://github.com/apache/tomcat/commit/5a3db0929…	external
https://lists.apache.org/thread/j7w54hqbkfcn0xb9x…	external
https://access.redhat.com/security/cve/CVE-2025-61795	self
https://bugzilla.redhat.com/show_bug.cgi?id=2406588	external
https://www.cve.org/CVERecord?id=CVE-2025-61795	external
https://nvd.nist.gov/vuln/detail/CVE-2025-61795	external
https://github.com/apache/tomcat/commit/1cdf5f730…	external
https://lists.apache.org/thread/wm9mx8brmx9g4zpyw…	external
https://access.redhat.com/security/cve/CVE-2026-55957	self
https://bugzilla.redhat.com/show_bug.cgi?id=2494669	external
https://www.cve.org/CVERecord?id=CVE-2026-55957	external
https://nvd.nist.gov/vuln/detail/CVE-2026-55957	external
https://lists.apache.org/thread/7fk339o5jvd4mcgsf…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for tomcat9 is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)\n\n* org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve (CVE-2025-55668)\n\n* org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:18536",
        "url": "https://access.redhat.com/errata/RHSA-2026:18536"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2369253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369253"
      },
      {
        "category": "external",
        "summary": "2388226",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388226"
      },
      {
        "category": "external",
        "summary": "2406590",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406590"
      },
      {
        "category": "external",
        "summary": "RHEL-148687",
        "url": "https://issues.redhat.com/browse/RHEL-148687"
      },
      {
        "category": "external",
        "summary": "RHEL-158962",
        "url": "https://issues.redhat.com/browse/RHEL-158962"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18536.json"
      }
    ],
    "title": "Red Hat Security Advisory: tomcat9 security update",
    "tracking": {
      "current_release_date": "2026-09-28T15:20:29+00:00",
      "generator": {
        "date": "2026-09-28T15:20:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:18536",
      "initial_release_date": "2026-05-19T09:00:26+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T09:00:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T09:00:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-28T15:20:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 10)",
                  "product_id": "AppStream-10.2.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-admin-webapps@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-docs-webapp@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-el-3.0-api@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-jsp-2.3-api@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-lib-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-lib-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-lib-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-lib@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-servlet-4.0-api@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat9-webapps-1:9.0.110-2.el10_2.noarch",
                "product": {
                  "name": "tomcat9-webapps-1:9.0.110-2.el10_2.noarch",
                  "product_id": "tomcat9-webapps-1:9.0.110-2.el10_2.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9-webapps@9.0.110-2.el10_2?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat9-1:9.0.110-2.el10_2.src",
                "product": {
                  "name": "tomcat9-1:9.0.110-2.el10_2.src",
                  "product_id": "tomcat9-1:9.0.110-2.el10_2.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcat9@9.0.110-2.el10_2?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-1:9.0.110-2.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src"
        },
        "product_reference": "tomcat9-1:9.0.110-2.el10_2.src",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-lib-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-lib-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat9-webapps-1:9.0.110-2.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
          "product_id": "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        },
        "product_reference": "tomcat9-webapps-1:9.0.110-2.el10_2.noarch",
        "relates_to_product_reference": "AppStream-10.2.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-34750",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2024-07-03T20:41:10+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295651"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This issue led to a miscounting of active HTTP/2 streams, which in turn led to using an incorrect infinite timeout that allowed connections to remain open that should have been closed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Improper Handling of Exceptional Conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Tomcat is significant due to its impact on the stability and security of web applications relying on HTTP/2. The improper handling of excessive HTTP headers during HTTP/2 stream processing leads to an inaccurate count of active streams. This miscount causes the application to apply an incorrect infinite timeout, allowing connections to persist indefinitely. Such behavior results in uncontrolled resource consumption, potentially exhausting server resources and leading to denial of service (DoS) conditions. By exploiting this flaw, an attacker could degrade the performance or availability of the server.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-34750"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295651",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295651"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-34750",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-34750"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-34750",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34750"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l",
          "url": "https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l"
        }
      ],
      "release_date": "2024-07-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: Improper Handling of Exceptional Conditions"
    },
    {
      "cve": "CVE-2024-38286",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2024-09-25T15:03:31.413000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314686"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Tomcat. Under certain configurations on any platform, this flaw allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Denial of Service in Tomcat",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "CVE-2024-38286 represents an important security issue due to its potential to cause an `OutOfMemoryError` through the exploitation of the TLS handshake process in Apache Tomcat. This vulnerability specifically impacts configurations using TLS 1.3, which is increasingly adopted for secure communications. The ability for an attacker to trigger an OutOfMemoryError can lead to a denial-of-service (DoS) condition, effectively rendering the application or server inoperable.\n\nThe issue only affects configurations that utilize TLS 1.3.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-38286"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314686",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314686"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-38286",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-38286"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-38286",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38286"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s",
          "url": "https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s"
        }
      ],
      "release_date": "2024-09-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: Denial of Service in Tomcat"
    },
    {
      "cve": "CVE-2025-46701",
      "cwe": {
        "id": "CWE-178",
        "name": "Improper Handling of Case Sensitivity"
      },
      "discovery_date": "2025-05-29T20:00:51.512562+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2369253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Security constraint bypass for CGI scripts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate rather than Important due to several limiting technical factors that reduce its overall impact and exploitability. Firstly, the flaw only manifests on case-insensitive file systems (e.g., Windows NTFS or macOS HFS+), which are less common in production-grade Tomcat deployments, most of which run on case-sensitive Linux file systems. Secondly, the bypass only occurs when security constraints are defined specifically on the pathInfo portion of URLs mapped to the CGI servlet \u2014 a relatively uncommon and niche configuration in modern Tomcat-based applications, where URL-based access control tends to use more direct patterns or broader filters. Additionally, successful exploitation does not lead to remote code execution or denial of service, but rather circumvents access control under specific conditions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-46701"
        },
        {
          "category": "external",
          "summary": "RHBZ#2369253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-46701",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-46701"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-46701",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46701"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j",
          "url": "https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j"
        }
      ],
      "release_date": "2025-05-29T19:06:04.289000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: Apache Tomcat: Security constraint bypass for CGI scripts"
    },
    {
      "cve": "CVE-2025-55668",
      "cwe": {
        "id": "CWE-384",
        "name": "Session Fixation"
      },
      "discovery_date": "2025-08-13T14:00:45.674371+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2388226"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A session fixation vulnerability has been identified in Apache Tomcat, affecting its rewrite functionality. If the rewrite valve is enabled for a web application, an attacker can craft a specific URL. If a victim clicks on this malicious URL, their subsequent interaction with the resource will occur within the context of the attacker\u0027s session. This could allow an attacker to hijack the victim\u0027s session and perform actions on their behalf.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55668"
        },
        {
          "category": "external",
          "summary": "RHBZ#2388226",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2388226"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55668",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55668"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55668",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55668"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6",
          "url": "https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21",
          "url": "https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95",
          "url": "https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47",
          "url": "https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47"
        }
      ],
      "release_date": "2025-08-13T13:21:35.743000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve"
    },
    {
      "cve": "CVE-2025-55754",
      "cwe": {
        "id": "CWE-150",
        "name": "Improper Neutralization of Escape, Meta, or Control Sequences"
      },
      "discovery_date": "2025-10-27T18:01:17.953987+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406590"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An improper input neutralization flaw has been discovered in Apache Tomcat. \nTomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55754"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406590",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406590"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55754",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55754"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55754",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55754"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/5a3db092982c0c58d4855304167ee757fe5e79bb",
          "url": "https://github.com/apache/tomcat/commit/5a3db092982c0c58d4855304167ee757fe5e79bb"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd",
          "url": "https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd"
        }
      ],
      "release_date": "2025-10-27T17:29:50.756000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation"
    },
    {
      "cve": "CVE-2025-61795",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "discovery_date": "2025-10-27T18:01:06.418669+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2406588"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A denial of service flaw has been discovered in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2406588",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2406588"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-61795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61795"
        },
        {
          "category": "external",
          "summary": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06",
          "url": "https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp",
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "release_date": "2025-10-27T17:30:28.334000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service"
    },
    {
      "cve": "CVE-2026-55957",
      "cwe": {
        "id": "CWE-305",
        "name": "Authentication Bypass by Primary Weakness"
      },
      "discovery_date": "2026-06-29T21:01:13.605887+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2494669"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct password, leading to unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue is rated as Important severity because it allows an attacker to fully bypass password verification when authenticating against a Tomcat instance, potentially gaining unauthorized access to protected resources without any privileges or user interaction required.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
          "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
          "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55957"
        },
        {
          "category": "external",
          "summary": "RHBZ#2494669",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494669"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55957",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55957"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55957",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55957"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7fk339o5jvd4mcgsf0chbrn4o525ccjh",
          "url": "https://lists.apache.org/thread/7fk339o5jvd4mcgsf0chbrn4o525ccjh"
        }
      ],
      "release_date": "2026-06-29T20:47:12.661000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T09:00:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:18536"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-1:9.0.110-2.el10_2.src",
            "AppStream-10.2.GA:tomcat9-admin-webapps-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-docs-webapp-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-el-3.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-jsp-2.3-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-lib-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-servlet-4.0-api-1:9.0.110-2.el10_2.noarch",
            "AppStream-10.2.GA:tomcat9-webapps-1:9.0.110-2.el10_2.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: Apache Tomcat: Authentication bypass via missing critical step in JNDIRealm GSSAPI configuration"
    }
  ]
}

CVE-2024-34750 (GCVE-0-2024-34750)

Vulnerability from cvelistv5 – Published: 2024-07-03 19:32 – Updated: 2025-11-03 19:29

Title

Apache Tomcat: HTTP/2 excess header handling DoS

Summary

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-08 16:51 UTC

CWE

CWE-755 - Improper Handling of Exceptional Conditions
CWE-400 - Uncontrolled Resource Consumption

Assigner

apache mitre root

References

3 references

URL	Tags
https://lists.apache.org/thread/4kqf0bc9gxymjc2x7…	vendor-advisory
https://security.netapp.com/advisory/ntap-2024081…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.0-M20 (semver) Affected: 10.1.0-M1 , ≤ 10.1.24 (semver) Affected: 9.0.0-M1 , ≤ 9.0.89 (semver) Affected: 8.5.0 , ≤ 8.5.100 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)
apache	tomcat	Affected: 9.0.0-m1 , ≤ 9.0.89 (semver) Affected: 10.1.0-m1 , ≤ 10.1.24 (semver) Affected: 11.0.0-m1 , ≤ 11.0.0-m20 (semver) cpe:2.3:a:apache:tomcat::::::::

Credits

devme4f from VNPT-VCI

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "tomcat",
            "vendor": "apache",
            "versions": [
              {
                "lessThanOrEqual": "9.0.89",
                "status": "affected",
                "version": "9.0.0-m1",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "10.1.24",
                "status": "affected",
                "version": "10.1.0-m1",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "11.0.0-m20",
                "status": "affected",
                "version": "11.0.0-m1",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-34750",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-08T16:51:20.954347Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-13T16:05:56.107Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:29:53.932Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20240816-0004/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.0-M20",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.24",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.89",
              "status": "affected",
              "version": "9.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "devme4f from VNPT-VCI"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89.\u003c/p\u003e\u003cp\u003eThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100.\u0026nbsp;Other EOL versions may also be affected.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100.\u00a0Other EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-755",
              "description": "CWE-755 Improper Handling of Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400 Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:55:38.977Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: HTTP/2 excess header handling DoS",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2024-34750",
    "datePublished": "2024-07-03T19:32:34.695Z",
    "dateReserved": "2024-05-08T07:23:16.760Z",
    "dateUpdated": "2025-11-03T19:29:53.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-38286 (GCVE-0-2024-38286)

Vulnerability from cvelistv5 – Published: 2024-11-07 07:37 – Updated: 2025-11-03 20:38

Title

Apache Tomcat: Denial of Service

Summary

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.35 through 8.5.100 and 7.0.92 through 7.0.109. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue. Apache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-07 16:33 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

apache mitre root

References

4 references

URL	Tags
https://lists.apache.org/thread/wms60cvbsz3fpbz9p…	vendor-advisory
http://www.openwall.com/lists/oss-security/2024/09/23/2
https://security.netapp.com/advisory/ntap-2024110…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.0-M20 (semver) Affected: 10.1.0-M1 , ≤ 10.1.24 (semver) Affected: 9.0.13 , ≤ 9.0.89 (semver) Affected: 8.5.35 , ≤ 8.5.100 (semver) Affected: 7.0.92 , ≤ 7.0.109 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)
apache	tomcat	Affected: 11.0.0-m1 , ≤ 11.0.0-m20 (semver) Affected: 10.1.0-m1 , ≤ 10.1.24 (semver) Affected: 9.0.13 , ≤ 9.0.89 (custom) cpe:2.3:a:apache:tomcat::::::::

Credits

Ozaki, North Grid Corporation

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:38:04.247Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2024/09/23/2"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241101-0010/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "tomcat",
            "vendor": "apache",
            "versions": [
              {
                "lessThanOrEqual": "11.0.0-m20",
                "status": "affected",
                "version": "11.0.0-m1",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "10.1.24",
                "status": "affected",
                "version": "10.1.0-m1",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "9.0.89",
                "status": "affected",
                "version": "9.0.13",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-38286",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T16:33:49.152023Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T16:36:00.935Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.0-M20",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.24",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.89",
              "status": "affected",
              "version": "9.0.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.109",
              "status": "affected",
              "version": "7.0.92",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ozaki, North Grid Corporation"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAllocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.35 through 8.5.100 and 7.0.92 through 7.0.109.\u0026nbsp;Other EOL versions may also be affected.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cdiv\u003eApache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.\u003cbr\u003e\u003c/div\u003e\u003cbr\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89.\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.35 through 8.5.100 and 7.0.92 through 7.0.109.\u00a0Other EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue.\n\n\n\nApache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:54:56.605Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2024-06-04T06:21:00.000Z",
          "value": "Issue reported to Apache Tomcat Security Team"
        }
      ],
      "title": "Apache Tomcat: Denial of Service",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2024-38286",
    "datePublished": "2024-11-07T07:37:32.224Z",
    "dateReserved": "2024-06-12T16:27:23.740Z",
    "dateUpdated": "2025-11-03T20:38:04.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-46701 (GCVE-0-2025-46701)

Vulnerability from cvelistv5 – Published: 2025-05-29 19:06 – Updated: 2025-11-03 20:04

Title

Apache Tomcat: Security constraint bypass for CGI scripts

Summary

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-30 14:58 UTC

CWE

CWE-178 - Improper Handling of Case Sensitivity

Assigner

apache mitre root

References

3 references

URL	Tags
https://lists.apache.org/thread/xhqqk9w5q45srcdqh…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/05/29/4
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.6 (semver) Affected: 10.1.0-M1 , ≤ 10.1.40 (semver) Affected: 9.0.0.M1 , ≤ 9.0.104 (semver) Affected: 8.5.0 , ≤ 8.5.100 (semver) Unknown: 3 , < 8.5.0 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)

Credits

Greg K (https://github.com/gregk4sec)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:04:34.067Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/05/29/4"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-46701",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-30T14:58:21.998219Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-30T14:58:31.063Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.6",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.40",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.104",
              "status": "affected",
              "version": "9.0.0.M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.5.0",
              "status": "unknown",
              "version": "3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Greg K (https://github.com/gregk4sec)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Handling of Case Sensitivity vulnerability in Apache Tomcat\u0027s GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104.\u003cbr\u003eThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Handling of Case Sensitivity vulnerability in Apache Tomcat\u0027s GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-178",
              "description": "CWE-178 Improper Handling of Case Sensitivity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:46:02.476Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: Security constraint bypass for CGI scripts",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-46701",
    "datePublished": "2025-05-29T19:06:04.289Z",
    "dateReserved": "2025-04-28T12:28:07.568Z",
    "dateUpdated": "2025-11-03T20:04:34.067Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-55668 (GCVE-0-2025-55668)

Vulnerability from cvelistv5 – Published: 2025-08-13 13:21 – Updated: 2025-11-04 21:13

Title

Apache Tomcat: session fixation via rewrite valve

Summary

Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-13 13:38 UTC

CWE

CWE-384 - Session Fixation

Assigner

apache mitre root

References

2 references

URL	Tags
https://lists.apache.org/thread/v6bknr96rl7l1qxkl…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/08/13/3

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.7 (semver) Affected: 10.1.0-M1 , ≤ 10.1.41 (semver) Affected: 9.0.0.M1 , ≤ 9.0.105 (semver) Unknown: 8 , < 9.0.0.M1 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)

Credits

Greg K (https://github.com/gregk4sec)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-55668",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-13T13:38:12.498649Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-13T13:39:26.761Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:13:09.014Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/08/13/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.7",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.41",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.105",
              "status": "affected",
              "version": "9.0.0.M1",
              "versionType": "semver"
            },
            {
              "lessThan": "9.0.0.M1",
              "status": "unknown",
              "version": "8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Greg K (https://github.com/gregk4sec)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSession Fixation vulnerability in Apache Tomcat via rewrite valve.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\u003cbr\u003eOlder, EOL versions may also be affected.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.\u003c/p\u003e"
            }
          ],
          "value": "Session Fixation vulnerability in Apache Tomcat via rewrite valve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nOlder, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-384",
              "description": "CWE-384 Session Fixation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:39:30.355Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: session fixation via rewrite valve",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-55668",
    "datePublished": "2025-08-13T13:21:35.743Z",
    "dateReserved": "2025-08-13T12:16:36.881Z",
    "dateUpdated": "2025-11-04T21:13:09.014Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-55754 (GCVE-0-2025-55754)

Vulnerability from cvelistv5 – Published: 2025-10-27 17:29 – Updated: 2026-05-12 12:08

Title

Apache Tomcat: console manipulation via escape sequences in log messages

Summary

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.40 through 9.0.108. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.60 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 04:55 UTC

CWE

CWE-150 - Improper Neutralization of Escape, Meta, or Control Sequences

Assigner

apache mitre root

References

3 references

URL	Tags
https://lists.apache.org/thread/j7w54hqbkfcn0xb9x…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/10/27/5
https://cert-portal.siemens.com/productcert/html/…

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.10 (semver) Affected: 10.1.0-M1 , ≤ 10.1.44 (semver) Affected: 9.0.40 , ≤ 9.0.108 (semver) Affected: 8.5.60 , ≤ 8.5.100 (semver) Unknown: 3 , < 8.5.0 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)
Siemens	SIMATIC CN 4100	Affected: 0 , < V5.0 (custom)

Credits

Elysee Franchuk of MOBIA Technology Innovations

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-55754",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T04:55:55.372090Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:04.342Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:13:16.888Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/10/27/5"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC CN 4100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T12:08:28.428Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.10",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.44",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.108",
              "status": "affected",
              "version": "9.0.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.60",
              "versionType": "semver"
            },
            {
              "lessThan": "8.5.0",
              "status": "unknown",
              "version": "3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Elysee Franchuk of MOBIA Technology Innovations"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.\u003c/p\u003e\u003cdiv\u003e\u003cp\u003eTomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems.\u003c/p\u003e\u003c/div\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.40 through 9.0.108.\u003c/p\u003eThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.60 though 8.5.100. Other, older, EOL versions may also be affected.\u003cbr\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.\n\nTomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.40 through 9.0.108.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.60 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-150",
              "description": "CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:38:25.256Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: console manipulation via escape sequences in log messages",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-55754",
    "datePublished": "2025-10-27T17:29:50.756Z",
    "dateReserved": "2025-08-15T11:26:40.520Z",
    "dateUpdated": "2026-05-12T12:08:28.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-61795 (GCVE-0-2025-61795)

Vulnerability from cvelistv5 – Published: 2025-10-27 17:30 – Updated: 2026-05-12 12:08

Title

Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS

Summary

Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-27 18:48 UTC

CWE

CWE-404 - Improper Resource Shutdown or Release

Assigner

apache mitre root

References

3 references

URL	Tags
https://lists.apache.org/thread/wm9mx8brmx9g4zpyw…	vendor-advisory
http://www.openwall.com/lists/oss-security/2025/10/27/6
https://cert-portal.siemens.com/productcert/html/…

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.11 (semver) Affected: 10.1.0-M1 , ≤ 10.1.46 (semver) Affected: 9.0.0.M1 , ≤ 9.0.109 (semver) Affected: 8.5.0 , ≤ 8.5.100 (semver) Unknown: 3 , < 8.5.0 (semver) Unknown: 10.0.0-M1 , ≤ 10.0.27 (semver)
Siemens	SIMATIC CN 4100	Affected: 0 , < V5.0 (custom)

Credits

sw0rd1ight (https://github.com/sw0rd1ight)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-61795",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-27T18:48:52.755946Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-27T18:48:55.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:14:10.512Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/10/27/6"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC CN 4100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T12:08:33.715Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.11",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.46",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.109",
              "status": "affected",
              "version": "9.0.0.M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.5.0",
              "status": "unknown",
              "version": "3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.0.27",
              "status": "unknown",
              "version": "10.0.0-M1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "sw0rd1ight (https://github.com/sw0rd1ight)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Resource Shutdown or Release vulnerability in Apache Tomcat.\u003c/p\u003e\u003cdiv\u003e\u003cp\u003eIf an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.\u003c/p\u003e\u003c/div\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109.\u003c/p\u003eThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\u003cbr\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Improper Resource Shutdown or Release vulnerability in Apache Tomcat.\n\nIf an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "low"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "CWE-404 Improper Resource Shutdown or Release",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-29T11:37:45.872Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: Delayed cleaning of multi-part upload temporary files may lead to DoS",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2025-61795",
    "datePublished": "2025-10-27T17:30:28.334Z",
    "dateReserved": "2025-10-01T09:20:53.155Z",
    "dateUpdated": "2026-05-12T12:08:33.715Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-55957 (GCVE-0-2026-55957)

Vulnerability from cvelistv5 – Published: 2026-06-29 20:47 – Updated: 2026-06-30 13:27

Title

Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

Summary

Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Users are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-30 13:26 UTC

CWE

CWE-304 - Missing Critical Step in Authentication

Assigner

apache mitre root

References

2 references

URL	Tags
https://lists.apache.org/thread/7fk339o5jvd4mcgsf…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Tomcat	Affected: 11.0.0-M1 , ≤ 11.0.4 (semver) Affected: 10.1.0-M1 , ≤ 10.1.36 (semver) Affected: 9.0.0.M1 , ≤ 9.0.100 (semver) Affected: 8.5.0 , ≤ 8.5.100 (semver) Affected: 7.0.0 , ≤ 7.0.109 (semver) Unknown: 0 , < 7.0.0 (semver)

Credits

Ilan Toyter

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-06-29T22:24:34.997Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/06/29/26"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-55957",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-30T13:26:38.087999Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-30T13:27:37.064Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache Tomcat",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "11.0.4",
              "status": "affected",
              "version": "11.0.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.1.36",
              "status": "affected",
              "version": "10.1.0-M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.100",
              "status": "affected",
              "version": "9.0.0.M1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.100",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.109",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.0",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ilan Toyter"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMissing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password.\u003c/p\u003e\u003cp\u003eThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\u003c/p\u003e\u003cp\u003eUsers are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue.\u003c/p\u003e"
            }
          ],
          "value": "Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "important"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-304",
              "description": "CWE-304 Missing Critical Step in Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-29T20:47:12.661Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/7fk339o5jvd4mcgsf0chbrn4o525ccjh"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-55957",
    "datePublished": "2026-06-29T20:47:12.661Z",
    "dateReserved": "2026-06-17T19:25:28.759Z",
    "dateUpdated": "2026-06-30T13:27:37.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:18536

CVE-2024-34750 (GCVE-0-2024-34750)

CVE-2024-38286 (GCVE-0-2024-38286)

CVE-2025-46701 (GCVE-0-2025-46701)

CVE-2025-55668 (GCVE-0-2025-55668)

CVE-2025-55754 (GCVE-0-2025-55754)

CVE-2025-61795 (GCVE-0-2025-61795)

CVE-2026-55957 (GCVE-0-2026-55957)

Tags

Sightings

Nomenclature

Related by attack behaviour