Threats tagged 'bit-tomcat-2026-43514'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.4%	CVE-2026-43514Tomcat6 · Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat Low3.7EPSS 0.4%2026-05-12GCVE DatabaseCVE-2026-43514 An observable timing discrepancy vulnerability exists in Apache Tomcat when comparing the AJP secret. This vulnerability affects multiple versions across several major Tomcat branches. The issue is addressed in Apache Tomcat versions 11.0.22, 10.1.55, and 9.0.118. Users are advised to upgrade to these fixed versions to remediate the vulnerability. The CVSS score is 3.7, indicating a medium severity level. EPSS 0.4%Report on CVE-2026-43514 Vulnerability #bit-tomcat-2026-43514 #bitnami	GCVE Database	2026-05-12

Page 1 of 1