tomcat11-webapps

Direct Vulnerabilities

Known vulnerabilities in the tomcat11-webapps package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Improper Certificate Validation	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass	<1:11.0.26-1.amzn2023.0.1
H Time-of-check Time-of-use (TOCTOU)	<1:11.0.26-1.amzn2023.0.1
H Improper Handling of Length Parameter Inconsistency	<1:11.0.26-1.amzn2023.0.1
H Insufficient Session Expiration	<1:11.0.26-1.amzn2023.0.1
H Excessive Platform Resource Consumption within a Loop	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<1:11.0.26-1.amzn2023.0.1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<1:11.0.26-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:11.0.26-1.amzn2023.0.1
H Off-by-one Error	<1:11.0.26-1.amzn2023.0.1
H Incomplete Cleanup	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<1:11.0.26-1.amzn2023.0.1
H Incorrect Synchronization	<1:11.0.26-1.amzn2023.0.1
H Missing Release of Resource after Effective Lifetime	<1:11.0.26-1.amzn2023.0.1
H Incorrect Implementation of Authentication Algorithm	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Symbolic Name not Mapping to Correct Object	<1:11.0.26-1.amzn2023.0.1