[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faLdM_9jUv6tQzriU4etFSp79HS4SZYLYPs9waYA4CT0":3,"g5a-ex:apache\u002Ftomcat_native@*":337,"g5a-family:apache\u002Ftomcat_native":339},{"success":4,"data":5},true,{"product":6,"versions":190,"topVulnerabilitiesByEpss":278,"kevVulnerabilities":314,"seoMetadata":315,"meta":334},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":189},"apache","tomcat_native",87,3,0,"2018-07-31",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.11",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.12",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.13",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.14",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.15",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.16",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.17",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.18",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.19",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.20",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.21",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.22",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.23",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.24",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.25",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.26",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.27",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.28",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.29",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.30",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.31",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.32",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.33",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.34",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.1",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.10",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.11",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.12",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.13",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.14",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.15",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.16",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.17",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.18",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.19",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.2",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.20",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.21",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.22",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.23",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.24",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.25",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.26",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.27",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.28",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.29",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.3",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.30",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.31",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.32",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.33",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.34",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.35",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.36",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.37",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.38",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.39",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.4",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.5",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.6",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.7",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.8",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.9",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.1",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.2",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.3",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.4",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.5",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.6",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.7",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1",{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.10",{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.11",{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.12",{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.13",{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.14",{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.2",{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.3",{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.4",{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.5",{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.6",{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.7",{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.8",{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.9","Tomcat Native by Apache is a technology product with 87 tracked versions and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":11,"kev_count":11,"has_kev":16},{"version":166,"cve_count":11,"kev_count":11,"has_kev":16},{"version":168,"cve_count":11,"kev_count":11,"has_kev":16},{"version":170,"cve_count":11,"kev_count":11,"has_kev":16},{"version":172,"cve_count":11,"kev_count":11,"has_kev":16},{"version":174,"cve_count":11,"kev_count":11,"has_kev":16},{"version":176,"cve_count":11,"kev_count":11,"has_kev":16},{"version":178,"cve_count":11,"kev_count":11,"has_kev":16},{"version":180,"cve_count":11,"kev_count":11,"has_kev":16},{"version":182,"cve_count":11,"kev_count":11,"has_kev":16},{"version":184,"cve_count":11,"kev_count":11,"has_kev":16},{"version":186,"cve_count":11,"kev_count":11,"has_kev":16},{"version":188,"cve_count":11,"kev_count":11,"has_kev":16},[279,286,290,297,304,310],{"cveId":280,"description":281,"publishedDate":12,"cvssScore":282,"cvssVersion":283,"severity":284,"isKev":16,"epssScore":285},"CVE-2018-8020","Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multiple entries) of certificate statuses. Subsequently, revoked client certificates may not be properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS. Users not using OCSP checks are not affected by this vulnerability.",7.4,"v3.0","High",0.04146,{"cveId":287,"description":288,"publishedDate":12,"cvssScore":282,"cvssVersion":283,"severity":284,"isKev":16,"epssScore":289},"CVE-2018-8019","When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS. Users not using OCSP checks are not affected by this vulnerability.",0.04017,{"cveId":291,"description":292,"publishedDate":293,"cvssScore":294,"cvssVersion":283,"severity":295,"isKev":16,"epssScore":296},"CVE-2017-15698","When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 to 1.1.34 did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected (if the OCSP check had been made) to be accepted. Users not using OCSP checks are not affected by this vulnerability.","2018-01-31",5.9,"Medium",0.03527,{"cveId":298,"description":299,"publishedDate":300,"cvssScore":301,"cvssVersion":302,"severity":284,"isKev":16,"epssScore":303},"CVE-2026-86243","Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.","2026-09-23",7.5,"v3.1",0.00564,{"cveId":305,"description":306,"publishedDate":300,"cvssScore":307,"cvssVersion":302,"severity":308,"isKev":16,"epssScore":309},"CVE-2026-86246","Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default  including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 2.0.16 or 1.3.9, which fix the issue.",9.1,"Critical",0.00347,{"cveId":311,"description":312,"publishedDate":300,"cvssScore":282,"cvssVersion":302,"severity":284,"isKev":16,"epssScore":313},"CVE-2026-86247","Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.",0.00202,[],{"title":316,"metaDescription":317,"keywords":318,"structuredData":319},"Tomcat Native by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Tomcat Native by Apache covering 87 versions with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tomcat Native vulnerabilities, Tomcat Native security, Tomcat Native CVE, Apache Tomcat Native, Tomcat Native threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":320,"@type":321,"name":322,"description":317,"url":323,"manufacturer":324,"applicationCategory":328,"softwareVersion":329,"mainEntity":330},"https:\u002F\u002Fschema.org","SoftwareApplication","Tomcat Native","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Ftomcat_native",{"@type":325,"name":326,"url":327},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","87 versions tracked",{"@type":331,"name":332,"description":333,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tomcat Native Security Vulnerabilities","Security vulnerabilities affecting Tomcat Native by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":335,"apiVersion":336},"2026-10-28T14:04:29.186Z","3.0",{"rows":338,"total":11,"capped":16,"failed":11},[],[]]