https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:20:53.519084+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03434 bdu:2022-03434 2026-10-03T13:20:53.545133+00:00 bdu:2022-03434 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-29885 BIT-tomcat-2022-29885 — EncryptInterceptor does not provide complete protection on insecure networks 2026-10-03T13:20:53.545170+00:00

Affected: Bitnami: tomcat

The documentation of Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-443 certfr-2022-avi-443 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer un déni de service à dis… 2026-10-03T13:20:53.545204+00:00 certfr-2022-avi-443 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 Withdrawn: CLEANSTART-2026-AJ47488 — When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Prot… 2026-10-03T13:20:53.545220+00:00

Withdrawn by the publisher.

Affected: CleanStart: tomcat10

Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2022-49970 cnvd-2022-49970 2026-10-03T13:20:53.545241+00:00 cnvd-2022-49970 https://cve.radiocsirt.org/vuln/euvd-2026-16308 EUVD-2026-16308 2026-10-03T13:20:53.545253+00:00 EUVD-2026-16308 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29885 fkie_cve-2022-29885 2026-10-03T13:20:53.545262+00:00

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

 https://cve.radiocsirt.org/vuln/ghsa-r84p-88g2-2vx2 GHSA-r84p-88g2-2vx2 — Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption 2026-10-03T13:20:53.545282+00:00

Affected: Maven: org.apache.tomcat:tomcat

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

 https://cve.radiocsirt.org/vuln/gsd-2022-29885 gsd-2022-29885 2026-10-03T13:20:53.545303+00:00 gsd-2022-29885 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29885 UBUNTU-CVE-2022-29885 2026-10-03T13:20:53.545313+00:00

Affected: Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:20.04:LTS: tomcat9, Ubuntu:Pro:22.04:LTS: tomcat9

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0467 WID-SEC-W-2022-0467 — Apache Tomcat: Schwachstelle ermöglicht Denial of Service 2026-10-03T13:20:53.545337+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.