tomcat10-webapps

Direct Vulnerabilities

Known vulnerabilities in the tomcat10-webapps package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Information Exposure	<1:10.1.55-1.amzn2023.0.1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<1:10.1.55-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:10.1.55-1.amzn2023.0.1
H Information Exposure	<1:10.1.55-1.amzn2023.0.1
H Improper Handling of Case Sensitivity	<1:10.1.55-1.amzn2023.0.1
H Incorrect Implementation of Authentication Algorithm	<1:10.1.55-1.amzn2023.0.1
H Improper Validation of Syntactic Correctness of Input	<1:10.1.55-1.amzn2023.0.1
M Incomplete Blacklist	<1:10.1.54-1.amzn2023.0.1
M File and Directory Information Exposure	<1:10.1.54-1.amzn2023.0.1
M Incorrect Implementation of Authentication Algorithm	<1:10.1.54-1.amzn2023.0.1
M Open Redirect	<1:10.1.54-1.amzn2023.0.1
M Use of a Risky Cryptographic Primitive	<1:10.1.54-1.amzn2023.0.1
M Incorrect Implementation of Authentication Algorithm	<1:10.1.54-1.amzn2023.0.1
M Inappropriate Encoding for Output Context	<1:10.1.54-1.amzn2023.0.1
M HTTP Request Smuggling	<1:10.1.54-1.amzn2023.0.1
M External Control of System or Configuration Setting	<1:10.1.54-1.amzn2023.0.1
H Improper Validation of Unsafe Equivalence in Input	<1:10.1.52-1.amzn2023.0.1
H Improper Input Validation	<1:10.1.52-1.amzn2023.0.1
H Improper Certificate Validation	<1:10.1.52-1.amzn2023.0.1
H Directory Traversal	<1:10.1.48-1.amzn2023.0.1
H Improper Resource Shutdown or Release	<1:10.1.48-1.amzn2023.0.1
H Integer Overflow or Wraparound	<1:10.1.43-1.amzn2023.0.1
H Resource Exhaustion	<1:10.1.44-1.amzn2023.0.1
H Session Fixation	<1:10.1.43-1.amzn2023.0.1
H Resource Exhaustion	<1:10.1.43-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:10.1.42-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:10.1.42-1.amzn2023.0.1
H Authentication Bypass	<1:10.1.42-1.amzn2023.0.1
M Improper Handling of Case Sensitivity	<1:10.1.41-1.amzn2023.0.1
H Improper Input Validation	<1:10.1.40-1.amzn2023.0.1
H Improper Neutralization	<1:10.1.40-1.amzn2023.0.1
H Path Equivalence	<1:10.1.39-1.amzn2023.0.1
H Resource Exhaustion	<1:10.1.34-1.amzn2023.0.1
H Time-of-check Time-of-use (TOCTOU)	<1:10.1.34-1.amzn2023.0.1
H Time-of-check Time-of-use (TOCTOU)	<1:10.1.34-1.amzn2023.0.1
H Inadequate Encryption Strength	<1:10.1.34-1.amzn2023.0.1
H Uncaught Exception	<1:10.1.34-1.amzn2023.0.1

Vulnerability

Vulnerable Version

Information Exposure

<1:10.1.55-1.amzn2023.0.1