Threats tagged 'bit-tomcat-2026-29146'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 8.8%	CVE-2026-29146Red Hat Security Advisory: tomcat security update High7.5EPSS 8.8%2026-07-09GCVE DatabaseCVE-2026-29146 Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146) * Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486) Bug Fix(es) and Enhancement(s): * Remove tomcat clustering JAR from RPM builds (JIRA:RHEL-183993) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 8.8%Report on CVE-2026-29146 Vulnerability Red Hat Product Security CWE-1240 #bit-tomcat-2026-29146 #bitnami	GCVE Database	2026-07-09

Page 1 of 1 · 1 duplicate CVE record merged