Product by Apache Software Foundation
Apache Tomcat Native
8 known vulnerabilities in Apache Tomcat Native (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-8020 | Apache Tomcat Native: security vulnerability | 7.4 | |
| High | CVE-2018-8019 | Apache Tomcat Native: security vulnerability | 7.4 | |
| Medium | CVE-2017-15698 | Apache Tomcat Native: security vulnerability | 5.9 | |
| Critical | CVE-2026-29145 | Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled | 9.1 | |
| High | CVE-2026-86243 | Apache Tomcat Native: DoS via TLS handshake | 7.5 | |
| Critical | CVE-2026-86246 | Apache Tomcat Native: Insecure OpenSSL options enabled | 9.1 | |
| High | CVE-2026-24734 | Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass | 7.5 | |
| High | CVE-2026-86247 | Apache Tomcat Native: Client certificate requirements can be down-graded | 7.4 |