https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:08:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-03746 bdu:2022-03746 https://cve.radiocsirt.org/vuln/bdu:2022-03746 https://cve.radiocsirt.org/vuln/bit-tomcat-2022-34305 <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>In Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>In Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/bit-tomcat-2022-34305 https://cve.radiocsirt.org/vuln/certfr-2022-avi-579 certfr-2022-avi-579 https://cve.radiocsirt.org/vuln/certfr-2022-avi-579 https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tomcat10</p> <p>Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: tomcat10</p> <p>Multiple security vulnerabilities affect the tomcat10 package. When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aj47488 https://cve.radiocsirt.org/vuln/euvd-2026-17835 EUVD-2026-17835 https://cve.radiocsirt.org/vuln/euvd-2026-17835 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34305 <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34305 https://cve.radiocsirt.org/vuln/ghsa-6j88-6whg-x687 <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat</p> <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-6j88-6whg-x687 https://cve.radiocsirt.org/vuln/gsd-2022-34305 gsd-2022-34305 https://cve.radiocsirt.org/vuln/gsd-2022-34305 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34305 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: tomcat9, Ubuntu:Pro:22.04:LTS: tomcat9</p> <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: tomcat9, Ubuntu:Pro:22.04:LTS: tomcat9</p> <p>In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34305 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0449 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0449