[UPDATE] [hoch] Apache Tomcat und Tomcat Native: Mehrere Schwachstellen

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-28 08:21 UTC
  • Importiert: 2026-09-29 10:06 UTC
  • Quelle-ID: cert_bund
  • uid_hash: bb1aed3d1a34c230fcb1fc104c13ebfe4a31c496000bf79e2f2bc623ddb9aa46

Inhalt

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat und Tomcat Native ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2025-66614

HIGH

HIGH

7.6

2026-02-17

CVE-2026-24733

HIGH

MEDIUM

6.5

2026-02-17

CVE-2026-24734

HIGH

HIGH

7.4

2026-02-17

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2026:12194 vom 2026-04-30

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:12195 vom 2026-04-30

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:19054 vom 2026-05-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:25341 vom 2026-06-11

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:26323 vom 2026-06-16

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:5611 vom 2026-03-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:5612 vom 2026-03-25

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:67164 vom 2026-09-14

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:68660 vom 2026-09-17

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:68678 vom 2026-09-17

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:68679 vom 2026-09-17

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2-2026-3204 vom 2026-03-19

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2TOMCAT9-2026-024 vom 2026-03-19

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2TOMCAT9-2026-025 vom 2026-04-30

EXTERNAL - wid_csaf

Camunda Security Notices vom 2026-02-26

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:19054 vom 2026-05-29

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:25341 vom 2026-09-28

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:26323 vom 2026-06-17

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-18536 vom 2026-07-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-18537 vom 2026-07-22

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-18916 vom 2026-06-29

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-25341 vom 2026-07-24

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-26323 vom 2026-06-25

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-36788 vom 2026-07-21

EXTERNAL - wid_csaf

Apache Tomcat Mailing List CVE-2026-24734 vom 2026-02-17

EXTERNAL - wid_csaf

Apache Tomcat Mailing List CVE-2026-24733 vom 2026-02-17

EXTERNAL - wid_csaf

Apache Tomcat Mailing List CVE-2025-66614 vom 2026-02-17

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20350-1 vom 2026-03-14

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20612-1 vom 2026-04-23

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10307-1 vom 2026-03-09

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:10305-1 vom 2026-03-09

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20414-1 vom 2026-03-28

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20611-1 vom 2026-04-23

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:20444-1 vom 2026-04-02

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:20926-1 vom 2026-04-01

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:20982-1 vom 2026-04-09

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1558-1 vom 2026-04-23

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1572-1 vom 2026-04-23

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1604-1 vom 2026-04-24

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1603-1 vom 2026-04-24

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:21379-1 vom 2026-04-28

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:21378-1 vom 2026-04-28

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:21366-1 vom 2026-04-28

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0877-1 vom 2026-03-12

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0890-1 vom 2026-03-13

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0922-1 vom 2026-03-18

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:0932-1 vom 2026-03-19

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:1058-1 vom 2026-03-26

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-36790 vom 2026-07-22

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6329 vom 2026-06-08

EXTERNAL - wid_csaf

Apache Tomcat 10.1.52

EXTERNAL - wid_csaf

Apache Tomcat 11.0.18

EXTERNAL - wid_csaf

Apache Tomcat 9.0.115

EXTERNAL - wid_csaf

Dell Security Advisory DSA-2026-152 vom 2026-03-23

EXTERNAL - wid_csaf

IBM Security Bulletin 7268151 vom 2026-03-31

EXTERNAL - wid_csaf

IBM Security Bulletin 7286010 vom 2026-09-02

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss