Skip to contentApache Tomcat vulnerabilities
- apache tomcatThe Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8...CVE-2016-1240Public exploitFix available7.8 High
- apache tomcat, hp system management homepage, oracle linux +8 more +10 moreImproper Access Control in Apache TomcatCVE-2016-5388Fix availableEPSS 50.9%8.1 High
- apache commons fileupload, tomcat, canonical ubuntu linux +3 more +5 moreHigh severity vulnerability that affects commons-fileupload:commons-fileuploadCVE-2016-3092Fix availableEPSS 37.2%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763Fix availableEPSS 11.3%6.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Access Control in Apache TomcatCVE-2016-0714Public exploitFix availableEPSS 13.1%8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2016-0706Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreApache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351Fix available8.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346Fix availableEPSS 10.6%8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345Fix availableEPSS 18.4%5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5174Fix availableEPSS 12.6%4.3 Medium
- apache tomcat connectorsApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...CVE-2014-8111Fix available5.0 Medium
- apache tomcatApache Tomcat Unrestricted file upload vulnerabilityCVE-2013-4444Fix availableEPSS 14.0%6.8 Medium
- apache tomcatDenial of service in Apache TomcatCVE-2014-0095Fix available5.0 Medium
- apache tomcatMissing XML Validation in Apache TomcatCVE-2014-0119Fix available4.3 Medium
- apache tomcatImproper Neutralization of CRLF Sequences in HTTP Headers in Apache TomcatCVE-2014-0099Fix available4.3 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0096Fix available4.3 Medium
- apache tomcatInteger Overflow or Wraparound in Apache TomcatCVE-2014-0075Public exploitFix availableEPSS 17.6%5.0 Medium
- apache tomcat, debian linux, oracle solaris +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-4590Fix available4.3 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0033Fix available4.3 Medium
- apache tomcatApache Tomcat Denial of Service vulnerabilityCVE-2013-4322Public exploitFix available4.3 Medium
- apache tomcatApache Tomcat is vulnerable to HTTP request-smugglingCVE-2013-4286Fix availableEPSS 16.2%5.8 Medium
- apache tomcat** DISPUTED ** Apache Tomcat 7.x uses world-readable permissions for the log directory and its...CVE-2013-0346Disputed2.1 Low
- apache commons fileupload, tomcat, oracle retail applications +2 moreCommons FileUpload Denial of service vulnerabilityCVE-2014-0050Public exploitFix availableEPSS 83.3%7.5 High
- apache tomcat, redhat jboss enterprise application platform, jboss enterprise portal platform +2 moreDeserialization of Untrusted Data in Apache TomcatCVE-2013-2185Fix availableDisputed7.5 High
- apache tomcat** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in the Manager application in...CVE-2013-6357Public exploitDisputed6.8 Medium
- apache tomcat, debian linux +1 moreImproper Access Control in Apache TomcatCVE-2014-7810Fix availableEPSS 13.3%5.0 Medium
- apache tomcat, oracle virtualization +1 moreUncontrolled Resource Consumption in Apache TomcatCVE-2014-0230Fix availableEPSS 20.2%7.8 High
- apache tomcatImproper Input Validation in Apache TomcatCVE-2014-0227Fix availableEPSS 21.0%6.4 Medium
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-2071Fix available2.6 Low
- apache tomcatImproper Authentication in Apache TomcatCVE-2013-2067Fix availableEPSS 10.4%6.8 Medium
- apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensionsCVE-2012-3544Fix availableEPSS 11.0%5.0 Medium
- apache tomcatorg/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0...CVE-2012-45342.6 Low
- apache tomcatCross-Site Request Forgery in Apache TomcatCVE-2012-4431Public exploitFix available4.3 Medium
- apache tomcatAuthentication Bypass in Apache TomcatCVE-2012-3546Fix availableEPSS 12.0%4.3 Medium
- apache tomcat, opensuse +1 moreApache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage)...CVE-2012-55685.0 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2012-5887Fix availableEPSS 12.1%5.0 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2012-5886Fix available5.0 Medium
- apache tomcatImproper Access Control in Apache TomcatCVE-2012-5885Fix available5.0 Medium
- apache tomcatjava/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache...CVE-2012-27335.0 Medium
- apache tomcatDenial of Service in Apache TomcatCVE-2012-0022Fix availableEPSS 10.5%5.0 Medium
- apache tomcatApache Tomcat Exposes IP Addresses and HTTP Headers of RequestsCVE-2011-3375Fix available5.0 Medium
- apache tomcatUse of Hard-coded Cryptographic Key in Apache TomcatCVE-2011-5064Fix available4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2011-5063Fix available4.3 Medium
- apache tomcatImproper Authentication in Apache TomcatCVE-2011-5062Fix available5.0 Medium
- apache tomcatAuthentication Bypass in Apache TomcatCVE-2011-1184Fix available5.0 Medium
- apache tomcatImproper Input Validation in Apache TomcatCVE-2011-4858Public exploitFix availableEPSS 79.7%5.0 Medium
- apache tomcatorg/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not...CVE-2011-33764.4 Medium
- apache tomcatApache Tomcat Allows Remote Attackers to Spoof AJP RequestsCVE-2011-3190Fix availableEPSS 15.2%7.5 High
- apache tomcat, commons daemon +1 morenative/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache...CVE-2011-2729Fix available5.0 Medium
- apache tomcatApache Tomcat Allows Replacing of XML ParserCVE-2011-2481Fix available4.6 Medium
- Show moreLoading…