GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2026:4126-1

Vulnerability from csaf_suse - Published: 2026-09-11 06:49 - Updated: 2026-09-16 20:57
Summary
Security update for tomcat
Severity
Important
Notes
Title of the patch: Security update for tomcat
Description of the patch: This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893). - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894). - CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - fix incomplete (bsc#1276895). - CVE-2026-65905: Apache Tomcat: Limited replay attack possible with DIGEST authentication (bsc#1276896). - CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control (bsc#1276897). - CVE-2026-66299: memory exhaustion via maliciously slow clients due to the WebSocket chat example providing an unbounded buffer for undelivered messages (bsc#1273150). - CVE-2026-66422: Apache Tomcat: Servlet role references can bypass declarative role constraints (bsc#1276898). - CVE-2026-68525: Apache Tomcat: Redirect after FORM auth may bypass method specific constraints (bsc#1276899). - CVE-2026-68569: Apache Tomcat: Principal lookup can fail open in some cases (bsc#1276900). - CVE-2026-68763: Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset (bsc#1276901). - CVE-2026-73180: Apache Tomcat: Authenticated WebSocket session survives end of HTTP session (bsc#1276902). Changes for tomcat: - Updated to version 9.0.121
Patchnames: SUSE-2026-4126,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4126,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4126
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-65182
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch —
Vendor Fix
Threats
Impact important
CVE-2026-65183
5.3 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
CVE-2026-65637
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact important
CVE-2026-65905
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
CVE-2026-65927
7.3 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact important
CVE-2026-66299
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact important
CVE-2026-66422
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
CVE-2026-68525
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
CVE-2026-68569
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
CVE-2026-68763
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact important
CVE-2026-73180
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 45 products, the same list as for CVE-2026-65182
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1273150 self
https://bugzilla.suse.com/1276893 self
https://bugzilla.suse.com/1276894 self
https://bugzilla.suse.com/1276895 self
https://bugzilla.suse.com/1276896 self
https://bugzilla.suse.com/1276897 self
https://bugzilla.suse.com/1276898 self
https://bugzilla.suse.com/1276899 self
https://bugzilla.suse.com/1276900 self
https://bugzilla.suse.com/1276901 self
https://bugzilla.suse.com/1276902 self
https://www.suse.com/security/cve/CVE-2026-65182/ self
https://www.suse.com/security/cve/CVE-2026-65183/ self
https://www.suse.com/security/cve/CVE-2026-65637/ self
https://www.suse.com/security/cve/CVE-2026-65905/ self
https://www.suse.com/security/cve/CVE-2026-65927/ self
https://www.suse.com/security/cve/CVE-2026-66299/ self
https://www.suse.com/security/cve/CVE-2026-66422/ self
https://www.suse.com/security/cve/CVE-2026-68525/ self
https://www.suse.com/security/cve/CVE-2026-68569/ self
https://www.suse.com/security/cve/CVE-2026-68763/ self
https://www.suse.com/security/cve/CVE-2026-73180/ self
https://www.suse.com/security/cve/CVE-2026-65182 external
https://bugzilla.suse.com/1276893 external
https://www.suse.com/security/cve/CVE-2026-65183 external
https://bugzilla.suse.com/1276894 external
https://www.suse.com/security/cve/CVE-2026-65637 external
https://bugzilla.suse.com/1276895 external
https://www.suse.com/security/cve/CVE-2026-65905 external
https://bugzilla.suse.com/1276896 external
https://www.suse.com/security/cve/CVE-2026-65927 external
https://bugzilla.suse.com/1276897 external
https://www.suse.com/security/cve/CVE-2026-66299 external
https://bugzilla.suse.com/1273150 external
https://www.suse.com/security/cve/CVE-2026-66422 external
https://bugzilla.suse.com/1276898 external
https://www.suse.com/security/cve/CVE-2026-68525 external
https://bugzilla.suse.com/1276899 external
https://www.suse.com/security/cve/CVE-2026-68569 external
https://bugzilla.suse.com/1276900 external
https://www.suse.com/security/cve/CVE-2026-68763 external
https://bugzilla.suse.com/1276901 external
https://www.suse.com/security/cve/CVE-2026-73180 external
https://bugzilla.suse.com/1276902 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for tomcat",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for tomcat fixes the following issues:\n\n- CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint (bsc#1276893).\n- CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (bsc#1276894).\n- CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - fix incomplete (bsc#1276895).\n- CVE-2026-65905: Apache Tomcat: Limited replay attack possible with DIGEST authentication (bsc#1276896).\n- CVE-2026-65927: Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control\n  (bsc#1276897).\n- CVE-2026-66299: memory exhaustion via maliciously slow clients due to the WebSocket chat example providing an\n  unbounded buffer for undelivered messages (bsc#1273150).\n- CVE-2026-66422: Apache Tomcat: Servlet role references can bypass declarative role constraints (bsc#1276898).\n- CVE-2026-68525: Apache Tomcat: Redirect after FORM auth may bypass method specific constraints (bsc#1276899).\n- CVE-2026-68569: Apache Tomcat: Principal lookup can fail open in some cases (bsc#1276900).\n- CVE-2026-68763: Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset\n  (bsc#1276901).\n- CVE-2026-73180: Apache Tomcat: Authenticated WebSocket session survives end of HTTP session (bsc#1276902).\n\nChanges for tomcat:\n\n- Updated to version 9.0.121\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-4126,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4126,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4126",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4126-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:4126-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264126-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:4126-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-September/029010.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273150",
        "url": "https://bugzilla.suse.com/1273150"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276893",
        "url": "https://bugzilla.suse.com/1276893"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276894",
        "url": "https://bugzilla.suse.com/1276894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276895",
        "url": "https://bugzilla.suse.com/1276895"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276896",
        "url": "https://bugzilla.suse.com/1276896"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276897",
        "url": "https://bugzilla.suse.com/1276897"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276898",
        "url": "https://bugzilla.suse.com/1276898"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276899",
        "url": "https://bugzilla.suse.com/1276899"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276900",
        "url": "https://bugzilla.suse.com/1276900"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276901",
        "url": "https://bugzilla.suse.com/1276901"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276902",
        "url": "https://bugzilla.suse.com/1276902"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-65182 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-65182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-65183 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-65183/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-65637 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-65637/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-65905 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-65905/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-65927 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-65927/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-66299 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-66299/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-66422 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-66422/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68525 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68569 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68569/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-68763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-68763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-73180 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-73180/"
      }
    ],
    "title": "Security update for tomcat",
    "tracking": {
      "current_release_date": "2026-09-16T20:57:10Z",
      "generator": {
        "date": "2026-09-11T06:49:24Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:4126-1",
      "initial_release_date": "2026-09-11T06:49:24Z",
      "revision_history": [
        {
          "date": "2026-09-11T06:49:24Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-15T07:41:46Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T19:54:19Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:57:10Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "tomcat-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-admin-webapps@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-docs-webapp@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-el-3_0-api@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-embed-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-embed-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-embed-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-embed@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-javadoc-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-javadoc-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-javadoc-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-javadoc@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-jsp-2_3-api@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-jsvc-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-jsvc-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-jsvc-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-jsvc@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-lib-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-lib-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-lib-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-lib@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-servlet-4_0-api@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcat-webapps-9.0.121-3.177.3.noarch",
                "product": {
                  "name": "tomcat-webapps-9.0.121-3.177.3.noarch",
                  "product_id": "tomcat-webapps-9.0.121-3.177.3.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:apache:tomcat:9.0.121:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/tomcat-webapps@9.0.121-3.177.3?arch=noarch\u0026upstream=tomcat-9.0.121-3.177.3.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-hpc:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-javadoc-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-lib-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-javadoc-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-lib-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-javadoc-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-lib-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-javadoc-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-lib-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-admin-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-admin-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-docs-webapp-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-docs-webapp-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-javadoc-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-javadoc-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-lib-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-lib-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcat-webapps-9.0.121-3.177.3.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        },
        "product_reference": "tomcat-webapps-9.0.121-3.177.3.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-65182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-65182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-65182",
          "url": "https://www.suse.com/security/cve/CVE-2026-65182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276893 for CVE-2026-65182",
          "url": "https://bugzilla.suse.com/1276893"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-65182"
    },
    {
      "cve": "CVE-2026-65183",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-65183"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 through 9.0.120.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-65183",
          "url": "https://www.suse.com/security/cve/CVE-2026-65183"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276894 for CVE-2026-65183",
          "url": "https://bugzilla.suse.com/1276894"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-65183"
    },
    {
      "cve": "CVE-2026-65637",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-65637"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-65637",
          "url": "https://www.suse.com/security/cve/CVE-2026-65637"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276895 for CVE-2026-65637",
          "url": "https://bugzilla.suse.com/1276895"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-65637"
    },
    {
      "cve": "CVE-2026-65905",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-65905"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Authentication Bypass by Capture-replay vulnerability in Apache Tomcat\u0027s DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST \nauthenticated request with a nonceCount on the upper boundary of the \nreplay window then that request is replayable once only while the \nassociated nonceCount remains within the replay window.\n\n\n\n  \n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected:  from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-65905",
          "url": "https://www.suse.com/security/cve/CVE-2026-65905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276896 for CVE-2026-65905",
          "url": "https://bugzilla.suse.com/1276896"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-65905"
    },
    {
      "cve": "CVE-2026-65927",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-65927"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule.\n\n\n\n\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121 which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-65927",
          "url": "https://www.suse.com/security/cve/CVE-2026-65927"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276897 for CVE-2026-65927",
          "url": "https://bugzilla.suse.com/1276897"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-65927"
    },
    {
      "cve": "CVE-2026-66299",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-66299"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uncontrolled Resource Consumption vulnerability in Apache Tomcat\u0027s WebSocket chat example.\n\nThis issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application are not affected by this issue.\n\nUsers are recommended to remove the examples web application or to upgrade to version 11.0.25, 10.1.58 or 9.0.121 (when released), which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-66299",
          "url": "https://www.suse.com/security/cve/CVE-2026-66299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273150 for CVE-2026-66299",
          "url": "https://bugzilla.suse.com/1273150"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-66299"
    },
    {
      "cve": "CVE-2026-66422",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-66422"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole().\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.25 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.46 through 8.5.100, from 7.0.97 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-66422",
          "url": "https://www.suse.com/security/cve/CVE-2026-66422"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276898 for CVE-2026-66422",
          "url": "https://bugzilla.suse.com/1276898"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-66422"
    },
    {
      "cve": "CVE-2026-68525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect Authorization vulnerability in Apache Tomcat\u0027s FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET.\n\n\n\n\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\n\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68525",
          "url": "https://www.suse.com/security/cve/CVE-2026-68525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276899 for CVE-2026-68525",
          "url": "https://bugzilla.suse.com/1276899"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68525"
    },
    {
      "cve": "CVE-2026-68569",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68569"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances (e.g. CLIENT-CERT, SPNEGO) that a user would be authenticated even if the user did not exist in the DataSourceRealm.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\n\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68569",
          "url": "https://www.suse.com/security/cve/CVE-2026-68569"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276900 for CVE-2026-68569",
          "url": "https://bugzilla.suse.com/1276900"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-68569"
    },
    {
      "cve": "CVE-2026-68763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-68763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Uncontrolled Resource Consumption vulnerability in Apache Tomcat  via an allocation leak in the HTTP/2 backlog tracking when a stream is reset\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.59 through 8.5.100.  Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-68763",
          "url": "https://www.suse.com/security/cve/CVE-2026-68763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276901 for CVE-2026-68763",
          "url": "https://bugzilla.suse.com/1276901"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-68763"
    },
    {
      "cve": "CVE-2026-73180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-73180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta WebSocket specification when the HTTP session ended.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.43 through 7.0.109.  Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-73180",
          "url": "https://www.suse.com/security/cve/CVE-2026-73180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276902 for CVE-2026-73180",
          "url": "https://bugzilla.suse.com/1276902"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-admin-webapps-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-docs-webapp-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-el-3_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-javadoc-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-jsp-2_3-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-lib-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-servlet-4_0-api-9.0.121-3.177.3.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat-webapps-9.0.121-3.177.3.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-11T06:49:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-73180"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.