Vulnerability Reporttomcat:latest

tomcat:latesttomcat:jdk25-temurin-nobletomcat:jdk25-temurintomcat:jdk25tomcat:11.0.24-jdk25-temurin-nobletomcat:11.0.24-jdk25-temurintomcat:11.0.24-jdk25tomcat:11.0.24tomcat:11.0-jdk25-temurin-nobletomcat:11.0-jdk25-temurin
digestsha256:3747125ecc78357b5eb6e2e59352713c14a428514753fdf67db7af97999a18c4

Executive Summary

Last scanned:

Threat Score
0/100NEEDS ATTENTION
Reputation
TRUSTED

AI verdict failed due to an error.

Vulnerabilities

Vulnerability Log

122 total
CVE IDAdjusted SeverityPackageExploit ProbabilityRisk Context
CVE-2026-41992LOW3.82
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.3%
Theoretical Threat
Post-Exploit
CVE-2017-13716LOW3.3
binutils
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Post-Exploit
CVE-2025-45582LOW2.86
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.2
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69651LOW2.8
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2026-5704LOW2.8
tar
1.35+dfsg-3build1
fixed in 1.35+dfsg-3ubuntu0.4
0.4%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
bsdutils
1:2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-41991LOW2.4
gzip
1.12-1ubuntu3.1
fixed in 1.12-1ubuntu3.2
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
mount
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2026-27456LOW2.4
util-linux
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-1152LOW1.89
binutils
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Post-Exploit
CVE-2024-56433LOW1.84
passwd
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Post-Exploit
CVE-2025-69647LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69648LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69652LOW1.68
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69644LOW1.43
binutils
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Post-Exploit
CVE-2025-69645LOW1.43
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69646LOW1.43
binutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Post-Exploit
CVE-2025-69720NONE0
libncursesw6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
libtinfo6
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-base
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69720NONE0
ncurses-bin
6.4+20240113-1ubuntu2
fixed in 6.4+20240113-1ubuntu2.1
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4437NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-6238NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
libp11-kit0
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
p11-kit
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-13757NONE0
p11-kit-modules
0.25.3-4ubuntu2.1
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2026-5435NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2024-2236NONE0
libgcrypt20
1.10.3-2ubuntu0.1
No fix yet
1.1%
Low-Moderate Risk
Not Applicable
CVE-2026-5435NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69651NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-66382NONE0
libexpat1
2.6.1-2ubuntu0.4
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69651NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2025-69651NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2017-13716NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
1.4%
Low-Moderate Risk
Not Applicable
CVE-2026-27171NONE0
zlib1g
1:1.3.dfsg-3.1ubuntu2.1
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-4046NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-5450NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.5%
Theoretical Threat
Not Applicable
CVE-2026-5928NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.4%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-modules-bin
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam-runtime
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-54411NONE0
libpam0g
1.5.3-5ubuntu5.5
fixed in 1.5.3-5ubuntu5.6
0.3%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libblkid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libmount1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libsmartcols1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-27456NONE0
libuuid1
2.39.3-9ubuntu6.5
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc-bin
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
libc6
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2026-4438NONE0
locales
2.39-0ubuntu8.7
fixed in 2.39-0ubuntu8.8
0.3%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2025-1152NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.6%
Theoretical Threat
Not Applicable
CVE-2024-56433NONE0
login
1:4.13+dfsg1-4ubuntu3.2
No fix yet
0.4%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69647NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69648NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69652NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libsystemd0
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2026-40228NONE0
libudev1
255.4-1ubuntu8.16
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
binutils-common
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
binutils-x86-64-linux-gnu
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
libbinutils
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
libctf-nobfd0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
libctf0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
libgprofng0
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69644NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.1%
Theoretical Threat
Not Applicable
CVE-2025-69645NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable
CVE-2025-69646NONE0
libsframe1
2.42-4ubuntu2.10
No fix yet
0.2%
Theoretical Threat
Not Applicable

Reachability analysis

Which CVEs are actually reachable — is the vulnerable code even linked and callable.

Locked

Runtime verification

Live-container probes: default user, writable paths, capabilities, exposed ports.

Locked

Hardening recommendations

A step-by-step hardened build plan, with parity tests proving nothing breaks.

Locked

Want to check another image? Run a full scan with the Docker Security Scanner.