tomcat vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the tomcat package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Incomplete Cleanup	*
H Improper Input Validation	*
H Incomplete Cleanup	*
H HTTP Request Smuggling	<1:9.0.62-11.el9_2.4
H HTTP Request Smuggling	<1:9.0.62-11.el9_2.4
H HTTP Request Smuggling	<1:9.0.62-11.el9_2.4
H Information Exposure	*
H Information Exposure	*
H HTTP Request Smuggling	<1:9.0.62-37.el9_3.2
M Incomplete Cleanup	<1:9.0.62-37.el9_3.1
M Incomplete Cleanup	<1:9.0.62-37.el9_3.1
M Improper Input Validation	<1:9.0.62-37.el9_3.1
H Resource Exhaustion	<1:9.0.62-11.el9_2.3
H Resource Exhaustion	<1:9.0.62-11.el9_2.3
H Resource Exhaustion	<1:9.0.62-11.el9_2.3
H Resource Exhaustion	<1:9.0.62-11.el9_2.3
M Open Redirect	<1:9.0.62-37.el9_3.1
M Open Redirect	*
M Off-by-one Error	<1:9.0.62-37.el9_3
M Information Exposure	<1:9.0.62-37.el9_3
M Allocation of Resources Without Limits or Throttling	<1:9.0.62-37.el9_3
L Arbitrary Code Injection	*
L HTTP Request Smuggling	*