Known vulnerabilities in tomcat11-lib - page 3

Vendor: SUSE
Software: tomcat11-lib
Software CPE: cpe:2.3:o:suse:tomcat11-lib:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 61
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting tomcat11-lib tomcat11-lib is affected by 61 known vulnerabilities: 2 high, 38 medium, 21 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151966 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-86247		 CWE-362 Medium
No
No
 11.0.26-150600.13.36.2 24.09.2026 SB2026092480
SB2026100975
SB2026100977
and 2 more
#VU151965 - Insecure Default Initialization of Resource
CVE-2026-86246		 CWE-1188 Low
No
No
 11.0.26-150600.13.36.2 24.09.2026 SB2026092480
SB2026100975
SB2026100977
and 2 more
#VU151964 - Out-of-bounds read
CVE-2026-86243		 CWE-125 Medium
No
No
 11.0.26-150600.13.36.2 24.09.2026 SB2026092480
SB2026100975
SB2026100977
and 2 more
#VU151838 - Improper input validation
CVE-2026-87022		 CWE-20 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 6 more
#VU151839 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-86350		 CWE-444 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 7 more
#VU151840 - Improper Certificate Validation
CVE-2026-86248		 CWE-295 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 5 more
#VU151841 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-79677		 CWE-362 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 7 more
#VU151842 - Resource exhaustion
CVE-2026-78437		 CWE-400 Low
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 7 more
#VU151843 - Resource exhaustion
CVE-2026-78383		 CWE-400 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 7 more
#VU151844 - Resource exhaustion
CVE-2026-77791		 CWE-400 Medium
No
No
 11.0.26-150600.13.36.2 23.09.2026 SB2026092344
SB2026100975
SB2026100977
and 7 more
#VU145387 - Missing release of memory after effective lifetime
CVE-2026-68763		 CWE-401 Medium
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB2026091634
SB2026091642
and 9 more
#VU145386 - Improper Authentication
CVE-2026-68569		 CWE-287 Low
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 5 more
#VU145385 - Improper Access Control
CVE-2026-68525		 CWE-284 Low
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 5 more
#VU145384 - Improper Access Control
CVE-2026-66422		 CWE-284 Low
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 3 more
#VU145383 - Off-by-one Error
CVE-2026-65927		 CWE-193 Medium
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 5 more
#VU145382 - Authentication Bypass by Capture-replay
CVE-2026-65905		 CWE-294 Low
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 5 more
#VU145381 - Improper Access Control
CVE-2026-65637		 CWE-284 Medium
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 4 more
#VU145380 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-65183		 CWE-367 Low
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 4 more
#VU145379 - Improper Access Control
CVE-2026-65182		 CWE-284 Medium
No
No
 11.0.25-150600.13.33.2 26.08.2026 SB2026082616
SB20260921191
SB20260921206
and 5 more
#VU139938 - Allocation of Resources Without Limits or Throttling
CVE-2026-66299		 CWE-770 Medium
No
No
 11.0.25-150600.13.33.2 28.07.2026 SB20260728136
SB2026080742
SB20260921191
and 3 more


Showing elements 41 - 60 out of 61