# Apache Software Foundation Apache Tomcat Native.

Every CVE that names Apache Software Foundation Apache Tomcat Native among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Tomcat Native: Client certificate requirements can be down-graded](https://agentprime.io/advisories/CVE-2026-86247.md)
  `CVE-2026-86247` · CVE record: Apache Software Foundation Apache Tomcat Native · CVSS 7.4 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-366
- [Apache Tomcat Native: Insecure OpenSSL options enabled](https://agentprime.io/advisories/CVE-2026-86246.md)
  `CVE-2026-86246` · CVE record: Apache Software Foundation Apache Tomcat Native · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-1188
- [Apache Tomcat Native: DoS via TLS handshake](https://agentprime.io/advisories/CVE-2026-86243.md)
  `CVE-2026-86243` · CVE record: Apache Software Foundation Apache Tomcat Native · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-126
- [Apache Software Foundation Apache Tomcat Native: Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not…](https://agentprime.io/advisories/CVE-2018-8020.md)
  `CVE-2018-8020` · CVE record: Apache Software Foundation Apache Tomcat Native · No CVSS score · Not analysed yet · Published 31 Jul 2018
- [Apache Software Foundation Apache Tomcat Native: When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34…](https://agentprime.io/advisories/CVE-2018-8019.md)
  `CVE-2018-8019` · CVE record: Apache Software Foundation Apache Tomcat Native · No CVSS score · Not analysed yet · Published 31 Jul 2018
- [Apache Software Foundation Apache Tomcat Native: When parsing the AIA-Extension field of a client certificate…](https://agentprime.io/advisories/CVE-2017-15698.md)
  `CVE-2017-15698` · CVE record: Apache Software Foundation Apache Tomcat Native · No CVSS score · Not analysed yet · Published 31 Jan 2018

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-tomcat-native>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-tomcat-native/>. Everything for agents: <https://agentprime.io/llms.txt>.