apache tomcat 10.1.1 vulnerabilities and exploits

(subscribe to this query)

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that inv...

Apache Tomcat Apache Tomcat 8.5.83 Apache Tomcat 10.1.0 Apache Tomcat 10.1.1

When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not includ...

Apache Tomcat Apache Tomcat 11.0.0

The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.0.0-M1 to 9.0.60 and ...

Apache Tomcat Apache Tomcat 10.1.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack...

Apache Tomcat Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Workload Manager 12.2.0.1 Oracle Workload Manager 18c Oracle Workload Manager 19c Canonical Ubuntu Linux 16.04 Opensuse Leap 15.1 Netapp Oncommand System Manager

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lea...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 20.04 Mcafee Epolicy Orchestrator 5.9.0 Mcafee Epolicy Orchestrator 5.9.1

2 Github repositories

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the si...

Apache Tomcat Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1 Canonical Ubuntu Linux 16.04 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Instantis Enterprisetrack Oracle Micros Relate Crm Software 11.4 Oracle Mysql Enterprise Monitor Oracle Retail Order Broker 15.0

Apache Commons FileUpload prior to 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option...

Apache Commons Fileupload Apache Commons Fileupload 1.0 Debian Debian Linux 9.0 Debian Debian Linux 11.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook