Known vulnerabilities in tomcat8 (Ubuntu package)

Vendor: Canonical Ltd.
Software: tomcat8 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:tomcat8_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 15
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat8 (Ubuntu package) tomcat8 (Ubuntu package) is affected by 15 known vulnerabilities: 2 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276		 CWE-670 Low
No
No
 8.0.32-1ubuntu1.13+esm2, 8.5.39-1ubuntu1~18.04.3+esm6 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 7 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404		 CWE-670 Medium
No
No
 8.0.32-1ubuntu1.13+esm2, 8.5.39-1ubuntu1~18.04.3+esm6 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229		 CWE-79 Low
No
No
 8.0.32-1ubuntu1.13+esm2, 8.5.39-1ubuntu1~18.04.3+esm6 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU131177 - Improper Access Control
CVE-2026-43515		 CWE-284 Medium
Available
No
 8.0.32-1ubuntu1.13+esm2, 8.5.39-1ubuntu1~18.04.3+esm6 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 22 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 Ubuntu Pro 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 Ubuntu Pro 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Available
No
 Ubuntu Pro 16.05.2022 SB2022051612
SB2022072044
SB20220720107
and 19 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 Ubuntu Pro 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41079		 CWE-835 Medium
No
No
 Ubuntu Pro 15.09.2021 SB2021091527
SB2021100721
SB2021101512
and 16 more
#VU51014 - Resource Management Errors
CVE-2021-25122		 CWE-399 Medium
No
No
 Ubuntu Pro 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13935		 CWE-835 Medium
Available
No
 8.0.32-1ubuntu1.13 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 14 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 Ubuntu Pro, 8.0.32-1ubuntu1.13 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more
#VU25807 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-1935		 CWE-444 Medium
No
No
 8.0.32-1ubuntu1.13 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 15 more
#VU20992 - Resource Management Errors
CVE-2019-10072		 CWE-399 Medium
No
No
 8.0.32-1ubuntu1.10, 8.5.39-1ubuntu1~18.04.3 10.09.2019 SB2019091025
SB2019112011
SB2019112012
and 14 more
#VU18638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0221		 CWE-79 Low
Available
No
 8.0.32-1ubuntu1.10, 8.5.39-1ubuntu1~18.04.3 30.05.2019 SB2019041101
SB2019070106
SB2019072501
and 13 more