Sun has acknowledged some vulnerabilities in Tomcat included in Sun Solaris 10, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, conduct cross-site scripting attacks, or to cause a DoS (Denial of Service).