Known vulnerabilities in tomcat-jsvc - page 3

Vendor: openEuler
Software: tomcat-jsvc
Software CPE: cpe:2.3:o:openeuler:tomcat-jsvc:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 73
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat-jsvc tomcat-jsvc is affected by 73 known vulnerabilities: 5 high, 54 medium, 14 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125		 CWE-424 Medium
No
No
 9.0.100-4, 9.0.100-5 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU109959 - Improper Handling of Case Sensitivity
CVE-2025-46701		 CWE-178 Low
Available
No
 9.0.100-3 30.05.2025 SB2025053002
SB2025061335
SB2025062313
and 22 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Available
No
 9.0.100-2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 9.0.100-2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 9.0.100-1 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 9.0.96-4, 9.0.100-1 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101813 - Resource exhaustion
CVE-2024-54677		 CWE-400 Medium
No
No
 9.0.96-4 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 13 more
#VU100591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-52318		 CWE-79 Medium
No
No
 9.0.96-2 18.11.2024 SB2024111830
SB2024112250
SB2024112251
and 17 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 9.0.96-1, 9.0.96-2 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 9.0.96-1, 9.0.96-2 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 9.0.96-1, 9.0.96-2 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733		 CWE-200 Medium
Available
No
 9.0.10-31 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 9.0.96-1, 9.0.96-2 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 9.0.10-31 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 9.0.10-30 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 9.0.96-1, 9.0.96-2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 9.0.10-31 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 9.0.10-31 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980		 CWE-200 Low
No
No
 9.0.96-1, 9.0.96-2 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more
#VU63299 - Error Handling
CVE-2022-25762		 CWE-388 Medium
No
No
 9.0.96-1, 9.0.96-2 17.05.2022 SB2022051715
SB2022071173
SB2022072094
and 14 more


Showing elements 41 - 60 out of 73