Homepage

tomcat11-webapps

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the tomcat11-webapps package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
CVE-2026-86248

<11.0.26-150600.13.36.2
  • H
HTTP Request Smuggling

<11.0.26-150600.13.36.2
  • H
Buffer Over-read

<11.0.26-150600.13.36.2
  • M
Insecure Default Initialization of Resource

<11.0.26-150600.13.36.2
  • M
Improper Authentication

<11.0.26-150600.13.36.2
  • M
Improper Handling of Length Parameter Inconsistency

<11.0.26-150600.13.36.2
  • C
Authentication Bypass

<11.0.26-150600.13.36.2
  • M
Improper Check for Certificate Revocation

<11.0.26-150600.13.36.2
  • L
HTTP Request Smuggling

<11.0.26-150600.13.36.2
  • H
Missing Release of Resource after Effective Lifetime

<11.0.26-150600.13.36.2
  • H
Race Condition

<11.0.26-150600.13.36.2
  • L
Incomplete Cleanup

<11.0.26-150600.13.36.2
  • H
Allocation of Resources Without Limits or Throttling

<11.0.26-150600.13.36.2
  • H
Resource Exhaustion

<11.0.26-150600.13.36.2
  • L
Race Condition

<11.0.26-150600.13.36.2
  • M
Insufficient Session Expiration

<11.0.25-150600.13.33.2
  • H
Resource Exhaustion

<11.0.25-150600.13.33.2
  • M
Incorrect Authorization

<11.0.25-150600.13.33.2
  • M
Improper Authentication

<11.0.25-150600.13.33.2
  • M
Improper Authorization

<11.0.25-150600.13.33.2
  • M
Time-of-check Time-of-use (TOCTOU)

<11.0.25-150600.13.33.2
  • H
Improper Access Control

<11.0.25-150600.13.33.2
  • H
Off-by-one Error

<11.0.25-150600.13.33.2
  • M
Authentication Bypass

<11.0.25-150600.13.33.2
  • H
Improper Input Validation

<11.0.25-150600.13.33.2
  • H
Resource Exhaustion

<11.0.25-150600.13.33.2
  • H
Incomplete Documentation

<11.0.24-150600.13.27.1
  • H
Improper Handling of URL Encoding (Hex Encoding)

<11.0.24-150600.13.27.1
  • H
Improper Authorization

<11.0.22-150600.13.21.1
  • M
Information Exposure

<11.0.22-150600.13.21.1
  • M
Allocation of Resources Without Limits or Throttling

<11.0.22-150600.13.21.1
  • H
Authentication Bypass

<11.0.22-150600.13.21.1
  • M
Improper Handling of Case Sensitivity

<11.0.22-150600.13.21.1
  • M
Information Exposure

<11.0.22-150600.13.21.1
  • H
Improper Input Validation

<11.0.22-150600.13.21.1
  • M
CVE-2026-29145

<11.0.21-150600.13.18.1
  • H
CVE-2026-29146

<11.0.21-150600.13.18.1
  • M
Information Exposure Through Log Files

<11.0.21-150600.13.18.1
  • M
CVE-2026-29129

<11.0.21-150600.13.18.1
  • M
HTTP Request Smuggling

<11.0.21-150600.13.18.1
  • H
Missing Encryption of Sensitive Data

<11.0.21-150600.13.18.1
  • M
CVE-2026-34500

<11.0.21-150600.13.18.1
  • M
Open Redirect

<11.0.21-150600.13.18.1
  • M
Improper Encoding or Escaping of Output

<11.0.21-150600.13.18.1
  • H
Improper Certificate Validation

<11.0.21-150600.13.18.1
  • H
Improper Input Validation

<11.0.21-150600.13.18.1
  • M
CVE-2026-24734

<11.0.18-150600.13.15.1
  • H
Improper Certificate Validation

<11.0.18-150600.13.15.1
  • M
CVE-2026-24733

<11.0.18-150600.13.15.1
  • M
Improper Resource Shutdown or Release

<11.0.13-150600.13.12.1
  • M
Improper Neutralization

<11.0.13-150600.13.12.1
  • H
Directory Traversal

<11.0.13-150600.13.12.1
  • H
Improper Resource Shutdown or Release

<11.0.10-150600.13.9.1
  • M
Resource Exhaustion

<11.0.9-150600.13.6.1
  • M
Integer Overflow or Wraparound

<11.0.9-150600.13.6.1
  • H
Authentication Bypass

<11.0.9-150600.13.6.1