Known vulnerabilities in tomcat (Red Hat package)
Vendor:
Red Hat Inc.
Software:
tomcat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:tomcat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
30
Public exploits:
13
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
7.0.76-18.el7_9
9.0.87-2.el8_8
9.0.117-2.el9_8
9.0.87-2.el9_2
9.0.87-4.el9_6
9.0.87-2.el9_4
9.0.117-1.el9_8
10.1.36-1.el10_0.3
9.0.87-1.el8_10.7
9.0.87-1.el9_4.7
9.0.87-1.el9_2.7
9.0.87-1.el8_8.8
9.0.87-1.el9_2.6
9.0.87-1.el8_8.7
9.0.87-3.el9_6.3
10.1.36-1.el10_0.2
9.0.87-1.el8_10.6
9.0.87-1.el8_8.5
9.0.87-1.el9_2.4
9.0.87-3.el9_6.1
9.0.87-1.el9_4.4
9.0.87-1.el8_10.4
9.0.87-1.el8_8.4
9.0.87-1.el8_10.3
9.0.87-1.el9_4.3
9.0.87-1.el9_2.3
9.0.87-2.el9_5.1
9.0.87-1.el9_2.2
9.0.87-1.el8_8.3
9.0.87-1.el8_10.2
9.0.87-1.el9_4.2
9.0.87-1.el8_8.2
9.0.87-1.el8_10.1
9.0.87-1.el9_2.1
9.0.87-1.el9_4.1
9.0.62-11.el9_2.4
9.0.62-37.el9_3.2
9.0.62-27.el8_9.3
9.0.62-5.el8_8.3
9.0.62-27.el8_9
9.0.62-37.el9_3
9.0.62-5.el8_8.2
9.0.62-11.el9_2.3
7.0.76-12.el7_8
7.0.76-12.el7_7
7.0.76-11.el7_6
7.0.76-16.el7_9
7.0.76-15.el7
7.0.76-10.el7_6
7.0.76-11.el7_7
7.0.76-9.el7
7.0.76-9.el7_6
7.0.76-8.el7_5
7.0.76-3.el7_4
7.0.76-2.el7
7.0.69-12.el7_3
7.0.42-5.el7_0
7.0.42-6.el7_0
7.0.42-8.el7_0
7.0.54-2.el7_1
7.0.54-8.el7_2
7.0.69-10.el7
7.0.69-11.el7_3
Vulnerabilities (30)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125746 - Protection Mechanism Failure CVE-2026-34486 |
CWE-693 | Medium | 7.0.76-18.el7_9, 9.0.87-2.el8_8, 9.0.87-2.el9_2, 9.0.87-2.el9_4, 9.0.87-4.el9_6, 9.0.117-2.el9_8 | 09.04.2026 |
SB20260409110 SB20260417131 SB20260422214 and 14 more |
||
| #VU125739 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-29146 |
CWE-327 | Medium | 7.0.76-18.el7_9, 9.0.87-2.el8_8, 9.0.87-2.el9_2, 9.0.87-2.el9_4, 9.0.87-4.el9_6, 9.0.117-2.el9_8 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 28 more |
||
| #VU122999 - Improper Authorization CVE-2026-24734 |
CWE-285 | Medium | 9.0.117-1.el9_8 | 17.02.2026 |
SB2026021766 SB2026030536 SB2026031245 and 24 more |
||
| #VU117682 - Resource exhaustion CVE-2025-61795 |
CWE-400 | Medium | 10.1.36-1.el10_0.3 | 27.10.2025 |
SB2025102749 SB20251031122 SB20251031123 and 39 more |
||
| #VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-55752 |
CWE-22 | High | 9.0.87-1.el8_8.8, 9.0.87-1.el8_10.7, 9.0.87-1.el9_2.7, 9.0.87-1.el9_4.7, 10.1.36-1.el10_0.3 | 27.10.2025 |
SB2025102748 SB20251031122 SB20251031123 and 43 more |
||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112275 - Resource Management Errors CVE-2025-52520 |
CWE-399 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 42 more |
||
| #VU112274 - Improper input validation CVE-2025-52434 |
CWE-20 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 32 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 156 more |
||
| #VU111161 - Resource exhaustion CVE-2025-48988 |
CWE-400 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 40 more |
||
| #VU111159 - Improper Protection of Alternate Path CVE-2025-49125 |
CWE-424 | Medium | 9.0.87-1.el8_8.7, 9.0.87-1.el8_10.6, 9.0.87-1.el9_2.6, 9.0.87-3.el9_6.3, 10.1.36-1.el10_0.2 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 35 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 9.0.87-1.el8_8.5, 9.0.87-1.el8_10.4, 9.0.87-1.el9_2.4, 9.0.87-1.el9_4.4, 9.0.87-3.el9_6.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU107995 - Improper input validation CVE-2025-31651 |
CWE-20 | Medium | 9.0.87-1.el8_8.8, 9.0.87-1.el8_10.7, 9.0.87-1.el9_2.7, 9.0.87-1.el9_4.7, 10.1.36-1.el10_0.3 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 46 more |
||
| #VU105485 - Improper input validation CVE-2025-24813 |
CWE-20 | Critical | 9.0.87-1.el8_8.4, 9.0.87-1.el8_10.3, 9.0.87-1.el9_2.3, 9.0.87-1.el9_4.3, 9.0.87-2.el9_5.1 | 10.03.2025 |
SB2025031069 SB2025031976 SB2025032642 and 48 more |
||
| #VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337 |
CWE-264 | High | 9.0.87-1.el8_8.5, 9.0.87-1.el8_10.4, 9.0.87-1.el9_2.4, 9.0.87-1.el9_4.4, 9.0.87-3.el9_6.1 | 20.12.2024 |
SB2024122063 SB2025011311 SB2025011801 and 45 more |
||
| #VU101814 - Permissions, Privileges, and Access Controls CVE-2024-50379 |
CWE-264 | Medium | 9.0.87-1.el8_8.4, 9.0.87-1.el8_8.5, 9.0.87-1.el8_10.3, 9.0.87-1.el8_10.4, 9.0.87-1.el9_2.3, 9.0.87-1.el9_2.4, 9.0.87-1.el9_4.3, 9.0.87-1.el9_4.4, 9.0.87-2.el9_5.1, 9.0.87-3.el9_6.1 | 17.12.2024 |
SB2024121745 SB2024121905 SB2024122055 and 57 more |
||
| #VU93732 - Resource Management Errors CVE-2024-34750 |
CWE-399 | Medium | 9.0.87-1.el8_8.3, 9.0.87-1.el8_10.2, 9.0.87-1.el9_2.2, 9.0.87-1.el9_4.2 | 03.07.2024 |
SB2024070346 SB20240711245 SB2024071542 and 56 more |
||
| #VU87510 - Improper input validation CVE-2024-24549 |
CWE-20 | Medium | 9.0.87-1.el8_8.2, 9.0.87-1.el8_10.1, 9.0.87-1.el9_2.1, 9.0.87-1.el9_4.1 | 13.03.2024 |
SB2024031386 SB2024031879 SB2024031880 and 64 more |
||
| #VU87509 - Resource exhaustion CVE-2024-23672 |
CWE-400 | Medium | 9.0.87-1.el8_8.2, 9.0.87-1.el8_10.1, 9.0.87-1.el9_2.1, 9.0.87-1.el9_4.1 | 13.03.2024 |
SB2024031386 SB2024032821 SB2024032824 and 49 more |
Showing elements 1 - 20 out of 30