Homepage

tomcat-docs-webapp

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the tomcat-docs-webapp package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Authentication Bypass

<1:9.0.120-1.el8_10
  • H
Improper Authorization

<1:9.0.120-1.el8_10
  • H
Missing Critical Step in Authentication

<1:9.0.120-1.el8_10
  • H
Incomplete Documentation

<1:9.0.120-1.el8_10
  • H
Improper Handling of URL Encoding (Hex Encoding)

<1:9.0.120-1.el8_10
  • H
Improper Input Validation

<1:9.0.120-1.el8_10
  • H
Information Exposure

<1:9.0.120-1.el8_10
  • H
Improper Handling of Case Sensitivity

<1:9.0.120-1.el8_10
  • H
Missing Encryption of Sensitive Data

<1:9.0.87-2.el8_10
  • H
CVE-2026-29146

<1:9.0.87-2.el8_10
  • H
Directory Traversal

<1:9.0.87-1.el8_10.7
  • H
Improper Encoding or Escaping of Output

<1:9.0.87-1.el8_10.7
  • H
Resource Exhaustion

<1:9.0.87-1.el8_10.6
  • H
CVE-2025-48976

<1:9.0.87-1.el8_10.6
  • H
Allocation of Resources Without Limits or Throttling

<1:9.0.87-1.el8_10.6
  • H
Integer Overflow or Wraparound

<1:9.0.87-1.el8_10.6
  • H
Authentication Bypass

<1:9.0.87-1.el8_10.6
  • H
Race Condition

<1:9.0.87-1.el8_10.6
  • H
Improper Resource Shutdown or Release

<1:9.0.87-1.el8_10.6
  • H
Time-of-check Time-of-use (TOCTOU)

<1:9.0.87-1.el8_10.4
  • H
Incomplete Cleanup

<1:9.0.87-1.el8_10.4
  • M
Deserialization of Untrusted Data

<1:9.0.87-1.el8_10.3
  • M
Time-of-check Time-of-use (TOCTOU)

<1:9.0.87-1.el8_10.3
  • H
Resource Exhaustion

<1:9.0.87-1.el8_10.2
  • H
CVE-2024-24549

<1:9.0.87-1.el8_10.1
  • H
Incomplete Cleanup

<1:9.0.87-1.el8_10.1
  • H
HTTP Request Smuggling

<1:9.0.62-27.el8_9.3
  • M
Incomplete Cleanup

<1:9.0.62-27.el8_9.2
  • M
Open Redirect

<1:9.0.62-27.el8_9.2
  • M
Incomplete Cleanup

<1:9.0.62-27.el8_9.2
  • M
Improper Input Validation

<1:9.0.62-27.el8_9.2
  • M
Off-by-one Error

<1:9.0.62-27.el8_9
  • M
Unprotected Transport of Credentials

<1:9.0.62-27.el8_9
  • M
Allocation of Resources Without Limits or Throttling

<1:9.0.62-27.el8_9
  • H
CVE-2023-44487

<1:9.0.62-5.el8_8.2