Known vulnerabilities in tomcat10-admin-webapps

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:tomcat10-admin-webapps:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 74
Public exploits: 9
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat10-admin-webapps tomcat10-admin-webapps is affected by 74 known vulnerabilities: 1 critical, 3 high, 47 medium, 23 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137407 - Insufficient Technical Documentation
CVE-2026-59084
CWE-1059 Low
No
No
10.1.57-150200.5.73.1 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 13 more
#VU137408 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-59083
CWE-180 Medium
No
No
10.1.57-150200.5.73.1 14.07.2026 SB2026071451
SB2026072515
SB2026073050
and 14 more
#VU135862 - Improper Access Control
CVE-2026-55956
CWE-284 Medium
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 9 more
#VU135863 - Authentication Bypass by Capture-replay
CVE-2026-55955
CWE-294 Medium
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 8 more
#VU135864 - Always-Incorrect Control Flow Implementation
CVE-2026-55276
CWE-670 Low
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 12 more
#VU135865 - Improper Certificate Validation
CVE-2026-53434
CWE-295 Medium
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 12 more
#VU135866 - Always-Incorrect Control Flow Implementation
CVE-2026-53404
CWE-670 Medium
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 14 more
#VU135867 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50229
CWE-79 Low
No
No
10.1.56-150200.5.70.1 30.06.2026 SB2026063007
SB2026070957
SB2026070958
and 9 more
#VU131177 - Improper Access Control
CVE-2026-43515
CWE-284 Medium
Available
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 31 more
#VU131178 - Information Exposure Through Timing Discrepancy
CVE-2026-43514
CWE-208 Low
No
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026060851
and 15 more
#VU131179 - Improper Handling of Case Sensitivity
CVE-2026-43513
CWE-178 Medium
No
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026060605
and 29 more
#VU131180 - Improper Authentication
CVE-2026-43512
CWE-287 Medium
Available
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 30 more
#VU131181 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42498
CWE-200 Low
No
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 27 more
#VU131182 - Improper input validation
CVE-2026-41293
CWE-20 Medium
No
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 35 more
#VU131183 - Resource exhaustion
CVE-2026-41284
CWE-400 Medium
No
No
10.1.55-150200.5.67.1 12.05.2026 SB2026051281
SB2026051592
SB2026052607
and 24 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880
CWE-444 Medium
No
No
10.1.54-150200.5.64.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 20 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145
CWE-295 Low
No
No
10.1.54-150200.5.64.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 19 more
#VU125741 - Configuration
CVE-2026-29129
CWE-16 Medium
No
No
10.1.54-150200.5.64.1 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 13 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854
CWE-601 Low
No
No
10.1.54-150200.5.64.1 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 16 more
#VU122998 - Improper Authorization
CVE-2025-66614
CWE-285 High
No
No
10.1.52-150200.5.61.1, 10.1.54-150200.5.64.1 17.02.2026 SB2026021765
SB2026031245
SB2026031361
and 19 more


Showing elements 1 - 20 out of 74