← All credits

The Apache Software Foundation

62 vulnerability records and advisories credit this contributor.

CVE-2026-111246
Apache TomEE: HTTP sessions shared across web applications in embedded HTTP server
CVE-2026-111247
Apache TomEE: Privilege escalation via user name matching a role name
CVE-2026-111248
Apache TomEE: Authentication with the stored password digest in Tomcat user identity store
CVE-2026-111249
Apache TomEE: Unauthenticated LiveReload endpoint reachable from the network
CVE-2026-111250
Apache TomEE: Authentication bypass via programmatic authentication in embedded HTTP server
CVE-2026-111251
Apache TomEE: Unauthenticated server shutdown via the admin port
CVE-2026-111256
Apache TomEE: Missing authentication for web service endpoints in embedded HTTP server
CVE-2026-111257
Apache TomEE: Well-known administrative credentials created at startup
CVE-2026-111258
Apache TomEE: Security constraint bypass via request routing
CVE-2026-111259
Apache TomEE: Predictable HTTP session identifiers in embedded server