Known vulnerabilities in tomcat-javadoc - page 2

Vendor: SUSE
Software: tomcat-javadoc
Software CPE: cpe:2.3:o:suse:tomcat-javadoc:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 77
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat-javadoc tomcat-javadoc is affected by 77 known vulnerabilities: 1 critical, 4 high, 52 medium, 20 low Critical High Medium Low

Vulnerabilities (77)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131178 - Information Exposure Through Timing Discrepancy
CVE-2026-43514		 CWE-208 Low
No
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026060851
and 14 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513		 CWE-178 Medium
No
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 28 more
#VU131180 - Improper Authentication
CVE-2026-43512		 CWE-287 Medium
Available
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 29 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498		 CWE-200 Low
No
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 26 more
#VU131182 - Improper input validation
CVE-2026-41293		 CWE-20 Medium
No
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 30 more
#VU131183 - Resource exhaustion
CVE-2026-41284		 CWE-400 Medium
No
No
 9.0.118-3.166.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 23 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 21 more
#VU125746 - Protection Mechanism Failure
CVE-2026-34486		 CWE-693 Medium
No
Exploited
 9.0.117-3.163.2 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 19 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 13 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 15 more
#VU125738 - Improper input validation
CVE-2026-32990		 CWE-20 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB20260417131
SB2026042329
and 16 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 9.0.117-3.163.2 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 29 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 9.0.115-150200.102.1 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 27 more
#VU122998 - Improper Authorization
CVE-2025-66614		 CWE-285 High
No
No
 9.0.115-150200.102.1, 9.0.117-3.163.2 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 18 more
#VU122997 - Protection Mechanism Failure
CVE-2026-24733		 CWE-693 Low
No
No
 9.0.36-3.156.1, 9.0.115-150200.102.1 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 10 more
#VU117682 - Resource exhaustion
CVE-2025-61795		 CWE-400 Medium
No
No
 9.0.36-3.153.2, 9.0.111-150200.96.1 27.10.2025 SB2025102749
SB20251031122
SB20251031123
and 39 more


Showing elements 21 - 40 out of 77