Known vulnerabilities in Apache Tomcat 9.0.0-M6 - page 6

Software: Apache Tomcat
Version: 9.0.0-M6
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 114
Public exploits: 26
Known exploited (KEV): 7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache Tomcat version 9.0.0-M6 Apache Tomcat 9.0.0-M6 is affected by 114 vulnerabilities: 1 critical, 8 high, 73 medium, 32 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156274 - Incomplete cleanup
CVE-2026-93446
CWE-459 Medium
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU156275 - Incomplete cleanup
CVE-2026-88041
CWE-459 Medium
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU156276 - Execution After Redirect (EAR)
CVE-2026-74049
CWE-698 Medium
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU156277 - Not Failing Securely (\'Failing Open\')
CVE-2026-74048
CWE-636 Low
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU156272 - Improper control of a resource through its lifetime
CVE-2026-101356
CWE-664 Medium
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU156273 - Missing Critical Step in Authentication
CVE-2026-101296
CWE-304 Medium
No
No
9.0.123, 10.1.61, 11.0.27 20.10.2026 SB2026102042
#VU10707 - Permissions, Privileges, and Access Controls
CVE-2018-1304
CWE-264 Low
No
No
7.0.85, 8.0.50, 8.5.28, 9.0.5 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 11 more
#VU8669 - Improper input validation
CVE-2017-12617
CWE-20 High
Public exploit available
Exploited
- 04.10.2017 SB2017100401
SB2017102604
SB2017112403
and 20 more
#VU6950 - Improper input validation
CVE-2017-5664
CWE-20 Low
No
No
- 06.06.2017 SB2017051109
SB2017060618
SB2017060619
and 23 more
#VU6675 - Improper Access Control
CVE-2017-5648
CWE-284 Low
No
No
- 24.05.2017 SB2017052404
SB2017111701
SB2017111702
and 10 more
#VU5449 - Resource Management Errors
CVE-2016-8745
CWE-399 Low
No
No
- 27.01.2017 SB2016121313
SB2017052404
SB2017032908
and 9 more
#VU1185 - Memory corruption
CVE-2016-6817
CWE-119 Medium
No
No
- 22.11.2016 SB2016112201
SB2022101411
SB2023022231
and 4 more
#VU1184 - Improper input validation
CVE-2016-6816
CWE-200 Low
Public exploit available
No
- 22.11.2016 SB2016112201
SB2017032908
SB2016121506
and 13 more
#VU1183 - Improper input validation
CVE-2016-8735
CWE-20 Medium
No
Exploited
- 22.11.2016 SB2016112201
SB2016121506
SB2016121507
and 7 more


Showing elements 101 - 120 out of 114