Advisories · Technology

Apache Software Foundation Apache Tomcat Native.

Every CVE that names Apache Software Foundation Apache Tomcat Native among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86247 CVE record

CVSS 7.4 High

Apache Tomcat Native: Client certificate requirements can be down-graded
- Apache Software Foundation Apache Tomcat Native
- CWE-366
Not analysed yet 23 Sept 2026
CVE-2026-86246 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Tomcat Native: Insecure OpenSSL options enabled
- Apache Software Foundation Apache Tomcat Native
- CWE-1188
Not analysed yet 23 Sept 2026
CVE-2026-86243 CVE record

CVSS 7.5 High

Apache Tomcat Native: DoS via TLS handshake
- Apache Software Foundation Apache Tomcat Native
- CWE-126
Not analysed yet 23 Sept 2026
CVE-2018-8020 CVE record

Apache Software Foundation Apache Tomcat Native: Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not…
- Apache Software Foundation Apache Tomcat Native
Not analysed yet 31 Jul 2018
CVE-2018-8019 CVE record

Apache Software Foundation Apache Tomcat Native: When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34…
- Apache Software Foundation Apache Tomcat Native
Not analysed yet 31 Jul 2018
CVE-2017-15698 CVE record

Apache Software Foundation Apache Tomcat Native: When parsing the AIA-Extension field of a client certificate…
- Apache Software Foundation Apache Tomcat Native
Not analysed yet 31 Jan 2018