Skip to contentApache Tomcat vulnerabilities
- apache tomcatImproper Input Validation in Apache TomcatCVE-2011-2526Fix available4.4 Medium
- apache tomcatInsertion of Sensitive Information into Log File in Apache TomcatCVE-2011-2204Fix available1.9 Low
- apache tomcatAccess restriction bypass in Apache TomcatCVE-2011-1582Fix available4.3 Medium
- apache tomcatApache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote UsersCVE-2011-1475Public exploitFix available5.0 Medium
- apache tomcatAccess controll bypass in Apache TomcatCVE-2011-1183Fix available5.8 Medium
- apache tomcatApache Tomcat does not follow ServletSecurity annotationsCVE-2011-1419Fix available5.8 Medium
- apache tomcatApache Tomcat allows remote attackers to bypass intended access restrictionsCVE-2011-1088Fix available5.8 Medium
- apache tomcatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2011-0013Fix availableEPSS 10.0%4.3 Medium
- apache tomcatApache Tomcat does not enforce the maxHttpHeaderSize limitCVE-2011-0534Fix available5.0 Medium
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2010-3718Fix available1.2 Low
- apache tomcatApache Tomcat has cookies without HTTPOnly flag in Set-Cookie headerCVE-2010-4312Fix available6.4 Medium
- apache tomcatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2010-4172Public exploitFix availableEPSS 42.0%4.3 Medium
- apache tomcatCross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the...CVE-2009-26964.3 Medium
- apache tomcatApache Tomcat does not properly handle an invalid Transfer-Encoding headerCVE-2010-2227Fix availableEPSS 54.8%6.4 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2010-1157Public exploitFix availableEPSS 52.5%2.6 Low
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache TomcatCVE-2009-2902Fix availableEPSS 10.7%4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2009-2901Fix available4.3 Medium
- apache tomcatApache Tomcat Directory Traversal vulnerabilityCVE-2009-2693Fix available5.8 Medium
- apache tomcatThe Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly...CVE-2009-3548Public exploitEPSS 79.0%7.5 High
- apache tomcatDirectory Traversal in Apache TomcatCVE-2008-5515Fix availableEPSS 18.7%5.0 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2009-0783Fix available4.2 Medium
- apache tomcatExposure of Sensitive Information in Apache TomcatCVE-2009-0580Public exploitFix availableEPSS 94.4%4.3 Medium
- apache tomcatApache Tomcat Denial of Service via Malformed Request HeadersCVE-2009-0033EPSS 10.1%5.0 Medium
- apache tomcat, mod jk +1 moreThe JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to...CVE-2008-5519Fix available2.6 Low
- apache tomcatCross-site scripting in Apache TomcatCVE-2009-0781Fix available4.3 Medium
- apache tomcatApache Tomcat information disclosure vulnerabilityCVE-2008-4308Fix available2.6 Low
- apache tomcatApache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address...CVE-2008-32714.3 Medium
- apache tomcatApache Tomcat Directory Traversal vulnerabilityCVE-2008-2938Public exploitFix availableEPSS 99.7%4.3 Medium
- apache tomcatApache Tomcat Path Traversal VulnerabilityCVE-2008-2370Public exploitFix availableEPSS 52.7%5.0 Medium
- apache tomcatApache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1232Public exploitFix availableEPSS 75.9%4.3 Medium
- apache tomcatApache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1947Fix available4.3 Medium
- apache tomcatApache Tomcat Sensitive Information DisclosureCVE-2008-0002Fix available5.8 Medium
- apache tomcatApache Tomcat Does Not Properly Handle Empty RequestsCVE-2007-62864.3 Medium
- apache tomcatExposure of Sensitive Information in Apache TomcatCVE-2007-5333Public exploitFix availableEPSS 62.6%5.0 Medium
- apache tomcatThe SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5...CVE-2008-0128Public exploitEPSS 19.6%5.0 Medium
- apache tomcatJULI logging component in Apache Tomcat does not restrict certain permissions for web applicationsCVE-2007-53426.4 Medium
- apache tomcatApache Tomcat Path Traversal VulnerabilityCVE-2007-5461Public exploitEPSS 39.7%3.5 Low
- apache tomcatApache Tomcat Example Application CSRF and XSS VulnerabilitiesCVE-2007-47244.3 Medium
- apache tomcatCross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6...CVE-2007-3386Public exploitEPSS 59.0%4.3 Medium
- apache tomcatApache Tomcat Mishandles Character Sequence in CookiesCVE-2007-3385EPSS 16.9%4.3 Medium
- apache tomcatApache Tomcat treats single quotes as delimiters in cookiesCVE-2007-3382Public exploitEPSS 37.5%4.3 Medium
- apache tomcatApache Tomcat's CookieExample Vulnerable to XSSCVE-2007-33844.3 Medium
- apache tomcatApache Tomcat SendMailServlet XSSCVE-2007-33834.3 Medium
- apache tomcatApache Tomcat vulnerable to Cross-site ScriptingCVE-2007-2450Fix available3.5 Low
- apache tomcatApache Tomcat XSS Vulnerabilities in Examples Web ApplicationCVE-2007-2449Public exploitEPSS 77.4%4.3 Medium
- apache tomcat jk web server connectormod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within...CVE-2007-1860Fix availableEPSS 13.2%5.0 Medium
- apache tomcatApache Tomcat Vulnerable to Cross-Site ScriptingCVE-2007-1355Public exploitFix availableEPSS 58.2%4.3 Medium
- apache tomcatThe default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30...CVE-2007-1858Public exploitEPSS 18.3%2.6 Low
- apache tomcatApache Tomcat XSS In Accept-Language HeadersCVE-2007-1358EPSS 19.9%2.6 Low
- apache tomcatCross-site scripting in Apache TomcatCVE-2006-7196Public exploitFix availableEPSS 72.2%4.3 Medium
- Show moreLoading…