Skip to contentApache Tomcat vulnerabilities
- apache tomcat, suse enterprise storage 5, linux enterprise server 12-sp2-bcl +13 more +15 moreUser-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviligesCVE-2020-8022Fix available7.7 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- apache tomcatImproper Locking in Apache TomcatCVE-2019-10072Fix availableEPSS 73.0%7.5 High
- apache tomcatCross-site scripting in Apache TomcatCVE-2019-0221Public exploitFix availableEPSS 58.3%6.1 Medium
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- apache tomcatApache Tomcat OS Command Injection vulnerabilityCVE-2019-0232Public exploitFix availableEPSS 99.9%8.1 High
- apache tomcatApache Tomcat Denial of Service vulnerabilityCVE-2019-0199Fix availableEPSS 72.9%7.5 High
- apache tomcat jk connector, apache software foundation tomcat connectors, debian linux +1 more +3 moreThe Apache Web Server (httpd) specific code that normalised the requested path before matching it...CVE-2018-11759Public exploitFix availableEPSS 90.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerabilityCVE-2018-11784Public exploitFix availableEPSS 97.7%4.3 Medium
- apache tomcat, debian linux +1 moreApache Tomcat Race Condition vulnerabilityCVE-2018-8037Fix availableEPSS 11.2%5.9 Medium
- apache tomcat native, debian linux +1 moreApache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check...CVE-2018-8020Fix available7.4 High
- apache tomcat native, debian linux +1 moreWhen using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not...CVE-2018-8019Fix available7.4 High
- apache tomcat, canonical ubuntu linux, debian linux +1 more +3 moreThe host name verification missing in Apache TomcatCVE-2018-8034Fix availableEPSS 21.0%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoderCVE-2018-1336Fix availableEPSS 20.4%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreThe defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all originsCVE-2018-8014Fix availableEPSS 20.9%9.8 Critical
- apache tomcat jk connector, apache software foundation tomcat connectors +1 moreThe IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that...CVE-2018-1323EPSS 46.8%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 moreApache Tomcat unauthorized access vulnerabilityCVE-2018-1304Public exploitFix availableEPSS 17.1%5.9 Medium
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreApache Tomcat information exposure vulnerabilityCVE-2018-1305Public exploitFix availableEPSS 14.5%6.5 Medium
- apache tomcat native, debian linux +1 moreWhen parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2...CVE-2017-15698Fix available5.9 Medium
- apache tomcatInconsistent documentation in Apache TomcatCVE-2017-15706Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 High
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-12616Fix availableEPSS 70.1%7.5 High
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2017-7675Fix availableEPSS 10.1%7.5 High
- apache tomcatImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2016-6817Fix available7.5 High
- apache tomcatInsufficient Verification of Data Authenticity in Apache TomcatCVE-2017-7674Fix available4.3 Medium
- apache tomcatImproper Handling of Exceptional Conditions in Apache TomcatCVE-2017-5664Fix availableEPSS 16.6%7.5 High
- apache tomcatExpected Behavior Violation in Apache TomcatCVE-2017-5651Fix available9.8 Critical
- apache tomcatImproper Resource Shutdown or Release in Apache TomcatCVE-2017-5650Fix available7.5 High
- apache tomcatExposure of Resource to Wrong Sphere in Apache TomcatCVE-2017-5648Fix availableEPSS 13.2%9.1 Critical
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-5647Fix availableEPSS 16.8%7.5 High
- apache tomcat jk connectorBuffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.CVE-2016-6808EPSS 22.7%9.8 Critical
- apache tomcat, netapp oncommand insight, oncommand shift +2 moreApache Tomcat allows remote attackers to read data that was intended to be associated with a different requestCVE-2016-8747Fix available7.5 High
- apache tomcatConcurrent Execution using Shared Resource with Improper Synchronization in Apache TomcatCVE-2016-8745Fix availableEPSS 16.0%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...CVE-2016-9774Fix available7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...CVE-2016-9775Fix available7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- apache tomcatImproper Input Validation in Apache TomcatCVE-2016-6816Public exploitFix availableEPSS 39.6%7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- apache tomcatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and...CVE-2016-63257.8 High
- apache tomcatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and...CVE-2016-5425Public exploit7.8 High
- Show moreLoading…