jws5-tomcat-jsvc

Direct Vulnerabilities

Known vulnerabilities in the jws5-tomcat-jsvc package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Excessive Platform Resource Consumption within a Loop	*
L Incorrect Synchronization	*
H HTTP Request Smuggling	*
L Improper Handling of Length Parameter Inconsistency	*
L Authentication Bypass by Primary Weakness	*
M Missing Release of Resource after Effective Lifetime	*
H Allocation of Resources Without Limits or Throttling	*
L HTTP Request Smuggling	*
H Authentication Bypass	*
M Incorrect Implementation of Authentication Algorithm	*
M Improper Certificate Validation	*
H Allocation of Resources Without Limits or Throttling	*
H Authentication Bypass by Primary Weakness	*
L Insecure Default Initialization of Resource	*
L Reliance on Untrusted Inputs in a Security Decision	*
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	*
M Improper Validation of Syntactic Correctness of Input	*
M Cross-site Scripting (XSS)	*
M Authentication Bypass	*
M Improperly Implemented Security Check for Standard	*
L Insufficient Logging	*
L Detection of Error Condition Without Action	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:9.0.7-10.redhat_10.1.el7jws
H Race Condition	<0:9.0.7-12.redhat_12.1.el7jws
M Improper Input Validation	<0:9.0.7-17.redhat_16.1.el7jws
M Improper Access Control	<0:9.0.7-17.redhat_16.1.el7jws
H Resource Injection	<0:9.0.7-12.redhat_12.1.el7jws