Multiple vulnerabilities in Apache Tomcat

Açıklama

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Configured cipher preference order not preserved vulnerability in Apache Tomcat can be exploited to obtain sensitive information.
2. Improper Input Validation vulnerability in Apache Tomcat can be exploited to bypass security restrictions.
3. Security vulnerability can be exploited to bypass security restrictions.
4. Padding Oracle vulnerability in Apache Tomcat can be exploited to obtain sensitive information.
5. Occasional URL redirection to untrusted Site (‘Open Redirect’) vulnerability in Apache Tomcat can be exploited to obtain sensitive information.
6. Inconsistent Interpretation of HTTP Requests (‘HTTP Request/Response Smuggling’) vulnerability in Apache Tomcat can be exploited to execute arbitrary code.

Orijinal öneriler

• Fixed in Apache Tomcat 9.0.116

Kötüye kullanma

Public exploits exist for this vulnerability.

İlgili ürünler

• Apache-Tomcat

CVE Listesi

• CVE-2026-24880
  critical
• CVE-2026-25854
  high
• CVE-2026-29129
  critical
• CVE-2026-29145
  critical
• CVE-2026-29146
  critical
• CVE-2026-32990
  high

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com