Filters
Apache TomcatThe Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, a…
First published (updated )
Apache TomcatIt was found that in limited circumstances it was possible for a malicious web application to replac…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache Tomcatjava/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in …
6.8
First published (updated )
Apache Tomcatorg/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, w…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache TomcatThe HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x befor…
First published (updated )
Apache TomcatThe HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x befor…
First published (updated )
Apache TomcatThe replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in A…
First published (updated )
Apache TomcatApache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient appr…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache TomcatThe HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x befor…
First published (updated )
Apache TomcatThe HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x befor…
4.3
First published (updated )
Apache TomcatDigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.…
4.3
First published (updated )
Apache TomcatApache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache Tomcatorg/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not pro…
4.4
First published (updated )
Apache TomcatThe HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x befor…
First published (updated )
Apache Tomcatnative/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache TomcatApache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote att…
5.8
First published (updated )
Apache TomcatApache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSe…
5.8
First published (updated )