Known vulnerabilities in tomcat-help - page 2

Vendor: openEuler
Software: tomcat-help
Software CPE: cpe:2.3:o:openeuler:tomcat-help:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 73
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat-help tomcat-help is affected by 73 known vulnerabilities: 5 high, 54 medium, 14 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 9.0.117-1 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125746 - Protection Mechanism Failure
CVE-2026-34486		 CWE-693 Medium
No
Exploited
 9.0.117-1 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 9.0.117-1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 9.0.117-1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 12 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 9.0.117-1 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 14 more
#VU125738 - Improper input validation
CVE-2026-32990		 CWE-20 Medium
No
No
 9.0.117-1 09.04.2026 SB20260409109
SB20260417131
SB2026042329
and 9 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 9.0.117-1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 9.0.115-1 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU122998 - Improper Authorization
CVE-2025-66614		 CWE-285 High
No
No
 9.0.115-1, 9.0.117-1 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 16 more
#VU122997 - Protection Mechanism Failure
CVE-2026-24733		 CWE-693 Low
No
No
 9.0.115-1 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 9 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 9.0.100-9 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 9.0.100-9 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754		 CWE-117 Low
No
No
 9.0.100-9 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU114443 - Session Fixation
CVE-2025-55668		 CWE-384 Medium
No
No
 9.0.100-8 26.08.2025 SB2025082650
SB2025082651
SB2025090566
and 15 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 9.0.100-8 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU112276 - Resource exhaustion
CVE-2025-53506		 CWE-400 Medium
No
No
 9.0.100-6 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 41 more
#VU112275 - Resource Management Errors
CVE-2025-52520		 CWE-399 Medium
No
No
 9.0.100-6 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 42 more
#VU112274 - Improper input validation
CVE-2025-52434		 CWE-20 Medium
No
No
 9.0.100-6 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 9.0.100-5 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Available
No
 9.0.100-4, 9.0.100-6 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more


Showing elements 21 - 40 out of 73