Known vulnerabilities in Apache Tomcat Native
Vendor:
Apache Foundation
Software:
Apache Tomcat Native
Software CPE:
cpe:2.3:a:apache_foundation:tomcat_native:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
1.3.9
2.0.16
1.3.8
2.0.15
2.0.14
1.3.7
2.0.13
1.3.6
1.3.5
1.3.4
1.3.3
2.0.12
2.0.11
1.3.2
2.0.10
2.0.9
1.3.1
2.0.8
1.3.0
2.0.7
1.2.39
2.0.6
1.2.38
2.0.5
1.2.37
2.0.4
2.0.3
1.2.36
2.0.2
2.0.1
2.0.0
1.2.35
1.2.34
1.2.33
1.2.32
1.2.31
1.2.30
1.2.29
1.2.28
1.2.27
1.2.26
1.2.25
1.2.24
1.2.23
1.2.22
1.2.21
1.2.20
1.2.19
1.2.18
1.2.17
1.2.16
1.2.15
1.2.14
1.2.13
1.2.12
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.34
1.1.33
1.1.32
1.1.31
1.1.30
1.1.29
1.1.28
1.1.27
1.1.26
1.1.25
1.1.24
1.1.23
1.1.22
1.1.21
1.1.20
1.1.19
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151966 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-86247 |
CWE-362 | Medium | 1.3.9, 2.0.16 | 24.09.2026 |
SB2026092480 |
||
| #VU151965 - Insecure Default Initialization of Resource CVE-2026-86246 |
CWE-1188 | Low | 1.3.9, 2.0.16 | 24.09.2026 |
SB2026092480 |
||
| #VU151964 - Out-of-bounds read CVE-2026-86243 |
CWE-125 | Medium | 1.3.9, 2.0.16 | 24.09.2026 |
SB2026092480 |