Skip to content

Apache Tomcat vulnerabilities

apache tomcatApache Tomcat XSS VulnerabilityCVE-2006-7195Fix available4.3 MediumMay 9, 2007
apache tomcatApache Tomcat Buffer Over-ReadCVE-2006-71977.8 HighApril 25, 2007
apache http server, tomcat +1 moreApache Tomcat Directory TraversalCVE-2007-0450Public exploitFix availableEPSS 91.2%5.0 MediumMarch 16, 2007
apache tomcat jk web server connectorStack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c)...CVE-2007-0774Public exploitFix availableEPSS 81.6%7.5 HighMarch 4, 2007
apache tomcatApache Tomcat Reveals DirectoriesCVE-2006-3835Public exploitFix availableEPSS 48.1%5.0 MediumJuly 25, 2006
apache tomcatMultiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta...CVE-2005-48384.3 MediumDecember 31, 2005
apache tomcatApache Tomcat allows remote attackers to read JSP source filesCVE-2005-48367.8 HighDecember 31, 2005
apache tomcatApache Tomcat Discloses MS-DOS PathnameCVE-2005-4703Public exploitEPSS 25.7%5.0 MediumDecember 31, 2005
apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous RequestsCVE-2005-3510Fix available5.0 MediumNovember 6, 2005
apache tomcat, hitachi cosminexus application server +1 moreApache Tomcat AJP Connector Information LeakCVE-2005-31642.6 LowOctober 6, 2005
apache tomcatTomcat Vulnerable to Web Cache PoisoningCVE-2005-2090EPSS 26.1%4.3 MediumJune 30, 2005
apache tomcatApache Tomcat before 5.x allows remote attackers to cause a denial of service (application crash)...CVE-2005-0808EPSS 23.4%5.0 MediumMarch 20, 2005
apache tomcatApache Tomcat Denial of Service vulnerability in the Catalina packageCVE-2003-0866Public exploitFix availableEPSS 34.8%5.0 MediumOctober 15, 2003
apache tomcatApache Tomcat XSS VulnerabilityCVE-2002-1567Public exploitFix availableEPSS 27.1%6.8 MediumSeptember 19, 2003
apache tomcatJakarta Tomcat Denial of Service vulnerabilityCVE-2003-0045Fix available5.0 MediumFebruary 7, 2003
apache tomcatJakarta Tomcat cross-site scripting (XSS) vulnerabilityCVE-2003-0044Fix available6.8 MediumJanuary 29, 2003
apache tomcatTomcat uses trusted privileges when processing web.xml fileCVE-2003-0043Fix available5.0 MediumJanuary 29, 2003
apache tomcatJakarta Tomcat Directory Listing vulnerabilityCVE-2003-0042Public exploitFix availableEPSS 46.0%5.0 MediumJanuary 29, 2003
apache tomcatApache Tomcat Source Code DisclosureCVE-2002-1394Fix available7.5 HighJanuary 9, 2003
apache tomcat, http server +1 moreApache Tomcat DoS via Malicious Get RequestCVE-2002-2272Public exploit7.8 HighDecember 31, 2002
apache tomcatApache Tomcat Leaks Pathname Information via Error MessageCVE-2002-20095.0 MediumDecember 31, 2002
apache tomcatApache Tomcat Leaks Information via Error MessageCVE-2002-2008Fix available5.0 MediumDecember 31, 2002
apache tomcatThe default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain...CVE-2002-2007Public exploitEPSS 41.4%5.0 MediumDecember 31, 2002
apache tomcatApache Tomcat Default Installation Reveals Sensitive InformationCVE-2002-2006Public exploitFix availableEPSS 30.7%5.0 MediumDecember 31, 2002
apache tomcatThe servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3...CVE-2002-18955.0 MediumDecember 31, 2002
apache tomcatApache Tomcat DoS Via Requests Including Null CharactersCVE-2002-0935Fix available5.0 MediumOctober 4, 2002
apache tomcatApache Tomcat Source Code DisclosureCVE-2002-1148Public exploitFix availableEPSS 18.6%5.0 MediumOctober 4, 2002
apache tomcatThe Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service ...CVE-2002-0936Public exploitEPSS 27.3%5.0 MediumAugust 31, 2002
apache tomcatApache Tomcat may be started without proper security settingsCVE-2002-0493Fix available7.5 HighAugust 12, 2002
apache tomcatCross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute...CVE-2002-0682Public exploitEPSS 13.6%7.5 HighJuly 23, 2002
apache tomcatApache Tomcat Directory TraversalCVE-2000-12105.0 MediumMarch 22, 2002
apache tomcat, hp secure os +1 moreUnknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to...CVE-2001-15637.5 HighDecember 31, 2001
apache tomcatApache Tomcat Reveals Path through Long URLCVE-2001-0917Fix available5.0 MediumNovember 22, 2001
apache tomcatApache Tomcat allows webmasters to insert xss into error messagesCVE-2001-0829EPSS 11.9%5.1 MediumNovember 22, 2001
apache tomcatApache Tomcat Allows Source DisclosureCVE-2001-0590Public exploitFix availableEPSS 11.0%5.0 MediumAugust 2, 2001
apache tomcatThe Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information...CVE-2000-0760Public exploitEPSS 62.5%6.4 MediumSeptember 21, 2000
apache tomcatJakarta Apache Tomcat Reveals Physical PathsCVE-2000-0759Public exploitEPSS 25.7%6.4 MediumSeptember 21, 2000
apache tomcatThe default configuration of Jakarta Tomcat does not restrict access to the /admin context, which...CVE-2000-0672EPSS 10.0%5.0 MediumJuly 20, 2000