Known vulnerabilities in tomcat9 (Debian package)

Vendor: Debian
Software: tomcat9 (Debian package)
Software CPE: cpe:2.3:o:debian:tomcat9_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 32
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat9 (Debian package) tomcat9 (Debian package) is affected by 32 known vulnerabilities: 3 high, 23 medium, 6 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 9.0.43-2~deb11u10 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 9.0.43-2~deb11u10 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 9.0.43-2~deb11u10 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 9.0.43-2~deb11u7 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 9.0.43-2~deb11u7 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 9.0.43-2~deb11u7 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 649 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 9.0.43-2~deb11u7 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 9.0.43-2~deb11u6 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 9.0.43-2~deb11u7 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 9.0.43-2~deb11u6 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 9.0.43-2~deb11u6 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980		 CWE-200 Low
No
No
 9.0.43-2~deb11u4 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Available
No
 9.0.43-2~deb11u4 16.05.2022 SB2022051612
SB2022072044
SB20220720107
and 19 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 9.0.43-2~deb11u4 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 9.0.43-2~deb11u3 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41079		 CWE-835 Medium
No
No
 9.0.31-1~deb10u6, 9.0.43-2~deb11u2 15.09.2021 SB2021091527
SB2021100721
SB2021101512
and 16 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 9.0.31-1~deb10u5 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU55417 - Improper Authentication
CVE-2021-30640		 CWE-287 Medium
No
No
 9.0.31-1~deb10u5, 9.0.31-1~deb10u6, 9.0.43-2~deb11u2 29.07.2021 SB2021072901
SB2021072902
SB2021081231
and 14 more
#VU51014 - Resource Management Errors
CVE-2021-25122		 CWE-399 Medium
No
No
 9.0.31-1~deb10u4 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329		 CWE-502 Medium
No
No
 9.0.31-1~deb10u4 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more


Showing elements 1 - 20 out of 32