The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6120 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6120-1                   security@debian.org     https://www.debian.org/security/                          Markus Koschany     February 05, 2026                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : tomcat10     CVE ID         : CVE-2025-46701 CVE-2025-48976 CVE-2025-48988 CVE-2025-48989                      CVE-2025-49125 CVE-2025-52520 CVE-2025-53506 CVE-2025-55668                      CVE-2025-55752 CVE-2025-55754 CVE-2025-61795 CVE-2025-31650                      CVE-2025-31651     Debian Bug     : 1106820 1108119 1108117 1111097 1108115 1109112 1109114 1111099 1119294


    Several security vulnerabilities have been found in Tomcat 10, a Java web     server and servlet engine. This update improves the handling of HTTP/2     connections and corrects various flaws which can lead to uncontrolled resource     consumption and a denial of service.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 10.1.52-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 10.1.52-1~deb13u1.

    We recommend that you upgrade your tomcat10 packages.

    For the detailed security status of tomcat10 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/tomcat10

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7705-1 advisory.

    It was discovered that Tomcat did not correctly handle case sensitivity. An attacker could possibly use     this issue to bypass authentication mechanisms. (CVE-2025-46701)

    Elysee Franchuk discovered that Tomcat did not correctly limit the number of attributes for a session. An     attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04     LTS. (CVE-2024-54677)

    It was discovered that Tomcat did not correctly sanitize certain URLs. An attacker could possibly use this     issue to bypass authentication mechanisms. (CVE-2025-31651)

    It was discovered that Tomcat did not correctly handle certain malformed HTTP headers, which could lead to     a memory leak. An attacker could possibly use this issue to cause a denial of service. This issue only     affected Ubuntu 24.04 LTS. (CVE-2025-31650)

    It was discovered that Tomcat did not correctly handle concurrent operations under certain circumstances.
    An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 24.04     LTS. (CVE-2024-50379)

    It was discovered that Tomcat did not correctly handle certain authentication errors. An attacker could     possibly use this issue to bypass authentication mechanisms. This issue only affected Ubuntu 24.04 LTS.
    (CVE-2024-52316)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0440 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-46701:
    Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security     constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI     servlet.

    This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from     9.0.0.M1 through 9.0.104.

    Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.

    CVE-2025-31650:
    Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP     priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A     large number of such requests could trigger an OutOfMemoryException resulting in a denial of service.

    This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from     11.0.0-M2 through 11.0.5.

    Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.

    CVE-2025-31651:
    Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.For a     subset of unlikely rewrite rule configurations, it was possible     for a specially crafted request to bypass some rewrite rules. If those     rewrite rules effectively enforced security constraints, those     constraints could be bypassed.

    This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from     9.0.0.M1 through 9.0.102.

    Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18536 advisory.

    Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet     and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by     Sun under the Java Community Process.  Tomcat is developed in an open and participatory environment and     released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the     best-of-breed developers from around the world.

    Security Fix(es):

    * tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)

    * org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve     (CVE-2025-55668)

    * org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18916 advisory.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

    Security Fix(es):

    * tomcat: Apache Tomcat: Security constraint bypass for CGI scripts (CVE-2025-46701)

    * org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve     (CVE-2025-55668)

    * org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation (CVE-2025-55754)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18536 advisory.

    - Resolves: RHEL-150720       Tomcat: Certificate revocation bypass due to improper OCSP response validation (CVE-2026-24734)
    - Resolves:
      Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500)
    - Resolves:
      Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487)
    - Resolves:
      Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486)
    - Resolves:
      Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483)
    - Resolves:
      Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990)
    - Resolves:
      Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146)
    - Resolves:
      Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145)
    - Resolves:
      Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129)
    - Resolves:
      Tomcat: Occasionally open redirect (CVE-2026-25854)
    - Resolves:
      Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880)
    - Resolves:
      Tomcat: Incomplete OCSP verification checks (CVE-2026-24734)
    - Resolves:
      Tomcat: Security constraint bypass (CVE-2026-24733)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
298164	Debian dsa-6120 : libtomcat10-embed-java - security update	Nessus	Debian Local Security Checks	2026/2/5	2026/3/3	high
253066	Ubuntu 24.04 LTS / 25.04 : Tomcat vulnerabilities (USN-7705-1)	Nessus	Ubuntu Local Security Checks	2025/8/20	2025/8/20	high
275959	TencentOS Server 4: tomcat (TSSA-2025:0440)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
315317	RHEL 10 : tomcat9 (RHSA-2026:18536)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/19	medium
315422	RHEL 9 : tomcat (RHSA-2026:18916)	Nessus	Red Hat Local Security Checks	2026/5/19	2026/5/19	medium
328894	Oracle Linux 10 : tomcat9 (ELSA-2026-18536)	Nessus	Oracle Linux Local Security Checks	2026/7/22	2026/7/22	medium

检测

插件搜索

high

high

high

medium

medium

medium