PT-2026-31711

CVE-2026-34483

·

Published

2026-04-02

·

Updated

2026-09-18

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.20, 10.1.0-M1 through 10.1.53, and 9.0.40 through 9.0.116
Description A flaw exists within the JsonAccessLogValve component of Apache Tomcat related to improper encoding or escaping of output.
Recommendations Upgrade to version 11.0.21 Upgrade to version 10.1.54 Upgrade to version 9.0.117
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-116: Improper Encoding or Escaping of Output
Related identifiers
CVE-2026-34483
BDU:2026-07145
GHSA-RV64-5GF8-9QQ8
ALSA-2026:25341
ALSA-2026:26323
ALSA-2026:36790
ALSA-2026:68677
BIT-TOMCAT-2026-34483
CLEANSTART-2026-IS05941
CLEANSTART-2026-NG48296
CLSA-2026-1785497476
CLSA-2026-1786121727
MGASA-2026-0095
OESA-2026-1970
OPENSUSE-SU-2026:10547-1
OPENSUSE-SU-2026:10548-1
OPENSUSE-SU-2026:10549-1
OPENSUSE-SU-2026:20595-1
OPENSUSE-SU-2026:20611-1
OPENSUSE-SU-2026:20612-1
RHSA-2026:20405
SUSE-SU-2026:1558-1
SUSE-SU-2026:1572-1
SUSE-SU-2026:1603-1
SUSE-SU-2026:1604-1
SUSE-SU-2026:21366-1
SUSE-SU-2026:21378-1
SUSE-SU-2026:21379-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com