https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:16:51.026803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03746 bdu:2022-03746 2026-10-03T18:16:51.214550+00:00 bdu:2022-03746 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-34305 BIT-tomcat-2022-34305 — XSS in examples web application 2026-10-03T18:16:51.214609+00:00

Affected: Bitnami: tomcat

In Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-579 certfr-2022-avi-579 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer une injection de code in… 2026-10-03T18:16:51.214658+00:00 certfr-2022-avi-579 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 Withdrawn: CLEANSTART-2026-AJ47488 — When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Prot… 2026-10-03T18:16:51.214684+00:00

Withdrawn by the publisher.

Affected: CleanStart: tomcat10

Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-17835 EUVD-2026-17835 2026-10-03T18:16:51.214724+00:00 EUVD-2026-17835 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34305 fkie_cve-2022-34305 2026-10-03T18:16:51.214753+00:00

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-6j88-6whg-x687 GHSA-6j88-6whg-x687 — Cross-site Scripting in Apache Tomcat 2026-10-03T18:16:51.214794+00:00

Affected: Maven: org.apache.tomcat:tomcat

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-34305 gsd-2022-34305 2026-10-03T18:16:51.214836+00:00 gsd-2022-34305 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34305 UBUNTU-CVE-2022-34305 2026-10-03T18:16:51.214860+00:00

Affected: Ubuntu:Pro:20.04:LTS: tomcat9, Ubuntu:Pro:22.04:LTS: tomcat9

In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0449 WID-SEC-W-2022-0449 — Apache Tomcat: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-03T18:16:51.214898+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.