Known vulnerabilities in tomcat-servlet-4_0-api - page 2
Vendor:
SUSE
Software:
tomcat-servlet-4_0-api
Software CPE:
cpe:2.3:o:suse:tomcat-servlet-4_0-api:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
95
Public exploits:
13
Known exploited (KEV):
3
Breakdown by Severity Chart
9.0.122-150200.123.2
9.0.121-3.177.3
9.0.121-150200.120.1
9.0.120-150200.117.1
9.0.120-3.174.1
9.0.120-150200.114.1
9.0.119-3.169.1
9.0.119-150200.111.1
9.0.118-150200.108.1
9.0.118-3.166.1
9.0.117-150200.105.1
9.0.117-3.163.2
9.0.115-3.160.1
9.0.115-150200.102.1
9.0.36-3.156.1
9.0.111-150200.99.1
9.0.36-3.153.2
9.0.111-150200.96.1
9.0.108-150200.91.1
9.0.36-3.148.1
9.0.36-3.142.1
9.0.104-150200.81.1
9.0.102-150200.78.1
9.0.36-3.139.1
9.0.36-3.136.1
9.0.98-150200.74.1
9.0.97-150200.71.1
9.0.36-3.133.1
9.0.36-3.130.1
9.0.36-3.127.1
9.0.91-150200.68.1
9.0.36-3.124.1
9.0.85-150200.57.1
9.0.36-3.118.1
9.0.36-150100.4.105.1
9.0.36-150100.4.98.1
9.0.36-3.111.1
9.0.82-150200.46.1
9.0.36-3.108.1
9.0.36-150100.4.93.1
9.0.75-150200.41.1
9.0.36-3.105.1
9.0.43-150200.38.1
9.0.43-150200.35.1
9.0.36-3.102.1
9.0.36-150100.4.90.1
9.0.36-150200.22.1
9.0.36-150100.4.76.1
9.0.36-150000.3.96.1
9.0.36-3.87.1
9.0.36-4.70.1
9.0.36-3.79.1
9.0.36-3.64.1
9.0.36-3.99.1
9.0.36-150100.4.87.1
9.0.36-3.93.1
9.0.36-150100.4.81.1
9.0.36-150000.3.101.2
9.0.36-3.90.1
9.0.36-13.1
9.0.36-3.84.1
9.0.36-4.63.1
9.0.36-3.71.1
9.0.36-4.58.1
9.0.36-3.24.1
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145388 - Insufficient Session Expiration CVE-2026-73180 |
CWE-613 | Low | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 26.08.2026 |
SB2026082616 SB20260921191 SB20260921206 and 1 more |
||
| #VU145387 - Missing release of memory after effective lifetime CVE-2026-68763 |
CWE-401 | Medium | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 26.08.2026 |
SB2026082616 SB2026091634 SB2026091642 and 4 more |
||
| #VU145386 - Improper Authentication CVE-2026-68569 |
CWE-287 | Low | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 26.08.2026 |
SB2026082616 SB20260921191 SB20260921206 and 1 more |
||
| #VU145385 - Improper Access Control CVE-2026-68525 |
CWE-284 | Low | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 26.08.2026 |
SB2026082616 SB20260921191 SB20260921206 and 1 more |
||
| #VU145384 - Improper Access Control CVE-2026-66422 |
CWE-284 | Low | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 26.08.2026 |
SB2026082616 SB20260921191 SB20260921206 and 1 more |
||
| #VU139938 - Allocation of Resources Without Limits or Throttling CVE-2026-66299 |
CWE-770 | Medium | 9.0.121-3.177.3, 9.0.121-150200.120.1 | 28.07.2026 |
SB20260728136 SB2026080742 SB20260921191 and 1 more |
||
| #VU137407 - Insufficient Technical Documentation CVE-2026-59084 |
CWE-1059 | Low | 9.0.120-3.174.1, 9.0.120-150200.114.1 | 14.07.2026 |
SB2026071451 SB2026072515 SB2026073050 and 12 more |
||
| #VU137408 - Incorrect Behavior Order: Validate Before Canonicalize CVE-2026-59083 |
CWE-180 | Medium | 9.0.120-3.174.1, 9.0.120-150200.114.1 | 14.07.2026 |
SB2026071451 SB2026072515 SB2026073050 and 13 more |
||
| #VU135862 - Improper Access Control CVE-2026-55956 |
CWE-284 | Medium | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 8 more |
||
| #VU135863 - Authentication Bypass by Capture-replay CVE-2026-55955 |
CWE-294 | Medium | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 7 more |
||
| #VU135864 - Always-Incorrect Control Flow Implementation CVE-2026-55276 |
CWE-670 | Low | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 11 more |
||
| #VU135865 - Improper Certificate Validation CVE-2026-53434 |
CWE-295 | Medium | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 11 more |
||
| #VU135866 - Always-Incorrect Control Flow Implementation CVE-2026-53404 |
CWE-670 | Medium | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 13 more |
||
| #VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-50229 |
CWE-79 | Low | 9.0.119-3.169.1, 9.0.119-150200.111.1 | 30.06.2026 |
SB2026063007 SB2026070957 SB2026070958 and 8 more |
||
| #VU131178 - Information Exposure Through Timing Discrepancy CVE-2026-43514 |
CWE-208 | Low | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026060851 and 14 more |
||
| #VU131179 - Improper Handling of Case Sensitivity CVE-2026-43513 |
CWE-178 | Medium | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026060605 and 28 more |
||
| #VU131180 - Improper Authentication CVE-2026-43512 |
CWE-287 | Medium | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 29 more |
||
| #VU131181 - Exposure of sensitive information to an unauthorized actor CVE-2026-42498 |
CWE-200 | Low | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 26 more |
||
| #VU131182 - Improper input validation CVE-2026-41293 |
CWE-20 | Medium | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 30 more |
||
| #VU131183 - Resource exhaustion CVE-2026-41284 |
CWE-400 | Medium | 9.0.118-3.166.1, 9.0.118-150200.108.1 | 12.05.2026 |
SB2026051281 SB2026051592 SB2026052607 and 23 more |
Showing elements 21 - 40 out of 95