Known vulnerabilities in tomcat10-admin-webapps - page 2
Vendor:
SUSE
Software:
tomcat10-admin-webapps
Software CPE:
cpe:2.3:o:suse:tomcat10-admin-webapps:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
48
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
10.1.57-150200.5.73.1
10.1.56-150200.5.70.1
10.1.55-150200.5.67.1
10.1.54-150200.5.64.1
10.1.52-150200.5.61.1
10.1.48-150200.5.54.1
10.1.44-150200.5.51.1
10.1.43-150200.5.48.1
10.1.40-150200.5.40.1
10.1.39-150200.5.36.1
10.1.34-150200.5.31.1
10.1.33-150200.5.28.1
10.1.25-150200.5.25.1
10.1.20-150200.5.22.2
10.1.18-150200.5.17.1
10.1.18-150200.5.11.1
10.1.18-150200.5.8.1
Vulnerabilities (48)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-24880 |
CWE-444 | Medium | 10.1.54-150200.5.64.1 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 19 more |
||
| #VU125740 - Improper Certificate Validation CVE-2026-29145 |
CWE-295 | Low | 10.1.54-150200.5.64.1 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 18 more |
||
| #VU125741 - Configuration CVE-2026-29129 |
CWE-16 | Medium | 10.1.54-150200.5.64.1 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 13 more |
||
| #VU125738 - Improper input validation CVE-2026-32990 |
CWE-20 | Medium | 10.1.54-150200.5.64.1 | 09.04.2026 |
SB20260409109 SB20260417131 SB2026042329 and 10 more |
||
| #VU125739 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-29146 |
CWE-327 | Medium | 10.1.54-150200.5.64.1 | 09.04.2026 |
SB20260409109 SB20260417131 SB20260422214 and 29 more |
||
| #VU122999 - Improper Authorization CVE-2026-24734 |
CWE-285 | Medium | 10.1.52-150200.5.61.1 | 17.02.2026 |
SB2026021766 SB2026030536 SB2026031245 and 27 more |
||
| #VU122998 - Improper Authorization CVE-2025-66614 |
CWE-285 | High | 10.1.52-150200.5.61.1, 10.1.54-150200.5.64.1 | 17.02.2026 |
SB2026021765 SB2026031245 SB2026031361 and 18 more |
||
| #VU122997 - Protection Mechanism Failure CVE-2026-24733 |
CWE-693 | Low | 10.1.52-150200.5.61.1 | 17.02.2026 |
SB2026021765 SB2026031245 SB2026031361 and 10 more |
||
| #VU117682 - Resource exhaustion CVE-2025-61795 |
CWE-400 | Medium | 10.1.48-150200.5.54.1 | 27.10.2025 |
SB2025102749 SB20251031122 SB20251031123 and 39 more |
||
| #VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-55752 |
CWE-22 | High | 10.1.48-150200.5.54.1 | 27.10.2025 |
SB2025102748 SB20251031122 SB20251031123 and 43 more |
||
| #VU117680 - Improper Output Neutralization for Logs CVE-2025-55754 |
CWE-117 | Low | 10.1.48-150200.5.54.1 | 27.10.2025 |
SB2025102748 SB20251031122 SB20251031123 and 27 more |
||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 10.1.44-150200.5.51.1 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 10.1.43-150200.5.48.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112275 - Resource Management Errors CVE-2025-52520 |
CWE-399 | Medium | 10.1.43-150200.5.48.1 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 42 more |
||
| #VU111159 - Improper Protection of Alternate Path CVE-2025-49125 |
CWE-424 | Medium | 10.1.43-150200.5.48.1 | 16.06.2025 |
SB2025061634 SB2025061927 SB20250620145 and 35 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.1.40-150200.5.40.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU107995 - Improper input validation CVE-2025-31651 |
CWE-20 | Medium | 10.1.40-150200.5.40.1 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 46 more |
||
| #VU105485 - Improper input validation CVE-2025-24813 |
CWE-20 | Critical | 10.1.39-150200.5.36.1 | 10.03.2025 |
SB2025031069 SB2025031976 SB2025032642 and 48 more |
||
| #VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337 |
CWE-264 | High | 10.1.39-150200.5.36.1 | 20.12.2024 |
SB2024122063 SB2025011311 SB2025011801 and 45 more |
||
| #VU101813 - Resource exhaustion CVE-2024-54677 |
CWE-400 | Medium | 10.1.34-150200.5.31.1 | 17.12.2024 |
SB2024121745 SB2024121905 SB2024122055 and 13 more |
Showing elements 21 - 40 out of 48