Homepage

jws6-tomcat-lib

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the jws6-tomcat-lib package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Incomplete Cleanup

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Missing Release of Resource after Effective Lifetime

*
  • M
Incorrect Implementation of Authentication Algorithm

*
  • L
Authentication Bypass by Primary Weakness

*
  • M
Improper Certificate Validation

*
  • L
Incorrect Synchronization

*
  • L
Improper Handling of Length Parameter Inconsistency

*
  • L
HTTP Request Smuggling

*
  • H
Insufficient Session Expiration

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Allocation of Resources Without Limits or Throttling

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Authentication Bypass by Primary Weakness

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Symbolic Name not Mapping to Correct Object

<0:10.1.49-16.redhat_00016.1.el8jws
  • M
Allocation of Resources Without Limits or Throttling

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Off-by-one Error

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Authentication Bypass

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Time-of-check Time-of-use (TOCTOU)

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Insufficient Logging

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Detection of Error Condition Without Action

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
HTTP Request Smuggling

*
  • H
Excessive Platform Resource Consumption within a Loop

*
  • H
Authentication Bypass

*
  • H
Reliance on Untrusted Inputs in a Security Decision

<0:10.1.49-16.redhat_00016.1.el8jws
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Improperly Implemented Security Check for Standard

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Information Exposure

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Improper Handling of Case Sensitivity

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Incorrect Implementation of Authentication Algorithm

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Information Exposure

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Improper Validation of Syntactic Correctness of Input

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Allocation of Resources Without Limits or Throttling

<0:10.1.49-15.redhat_00013.1.el8jws
  • H
Incorrect Implementation of Authentication Algorithm

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
File and Directory Information Exposure

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
Inappropriate Encoding for Output Context

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
Use of a Risky Cryptographic Primitive

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
Incorrect Implementation of Authentication Algorithm

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
Open Redirect

<0:10.1.49-13.redhat_00011.1.el8jws
  • H
HTTP Request Smuggling

<0:10.1.49-13.redhat_00011.1.el8jws
  • M
Incomplete Blacklist

<0:10.1.49-10.redhat_00008.1.el8jws
  • M
Improper Input Validation

<0:10.1.49-10.redhat_00008.1.el8jws
  • M
Improper Validation of Unsafe Equivalence in Input

<0:10.1.49-10.redhat_00008.1.el8jws
  • H
Improper Certificate Validation

<0:10.1.49-9.redhat_00007.1.el8jws
  • M
Improper Neutralization

<0:10.1.49-7.redhat_00006.1.el8jws
  • M
Session Fixation

<0:10.1.49-7.redhat_00006.1.el8jws
  • M
Improper Handling of Case Sensitivity

<0:10.1.49-7.redhat_00006.1.el8jws
  • H
Improper Resource Shutdown or Release

<0:10.1.36-19.redhat_00018.1.el8jws
  • H
Directory Traversal

<0:10.1.36-19.redhat_00018.1.el8jws
  • H
Improper Neutralization

<0:10.1.36-19.redhat_00018.1.el8jws
  • H
Resource Exhaustion

<0:10.1.36-8.redhat_00009.1.el8jws
  • M
Authentication Bypass

<0:10.1.36-7.redhat_00008.1.el8jws
  • M
Allocation of Resources Without Limits or Throttling

<0:10.1.36-7.redhat_00008.1.el8jws
  • M
Allocation of Resources Without Limits or Throttling

<0:10.1.36-7.redhat_00008.1.el8jws
  • H
Integer Overflow or Wraparound

<0:10.1.36-8.redhat_00009.1.el8jws
  • M
Resource Exhaustion

<0:10.1.36-7.redhat_00008.1.el8jws
  • H
Improper Input Validation

<0:10.1.36-6.redhat_00007.1.el8jws
  • H
Path Equivalence

<0:10.1.36-6.redhat_00007.1.el8jws
  • H
Uncaught Exception

<0:10.1.36-6.redhat_00007.1.el8jws
  • M
Time-of-check Time-of-use (TOCTOU)

<0:10.1.8-15.redhat_00022.1.el8jws
  • H
Resource Exhaustion

<0:10.1.8-10.redhat_00018.1.el8jws
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:10.1.8-10.redhat_00018.1.el8jws
  • H
Incomplete Cleanup

<0:10.1.8-7.redhat_00014.1.el8jws
  • H
Improper Input Validation

<0:10.1.8-6.redhat_00013.1.el8jws
  • H
HTTP Request Smuggling

<0:10.1.8-6.redhat_00013.1.el8jws
  • H
Open Redirect

<0:10.1.8-6.redhat_00013.1.el8jws