Known vulnerabilities in Apache Tomcat 10.0.0-M2 - page 5

Software: Apache Tomcat
Version: 10.0.0-M2
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 89
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache Tomcat version 10.0.0-M2 Apache Tomcat 10.0.0-M2 is affected by 89 vulnerabilities: 1 critical, 5 high, 60 medium, 23 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51014 - Resource Management Errors
CVE-2021-25122
CWE-399 Medium
No
No
8.5.63, 9.0.43, 10.0.2 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329
CWE-502 Medium
No
No
7.0.108, 8.5.63, 9.0.43, 10.0.2 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU49570 - Exposure of sensitive information to an unauthorized actor
CVE-2021-24122
CWE-200 Medium
No
No
7.0.107, 8.5.60, 9.0.40, 10.0.0-M10 14.01.2021 SB2021011807
SB2021072821
SB2022012734
and 5 more
#VU48779 - Resource Management Errors
CVE-2020-17527
CWE-399 Medium
No
No
8.5.60, 9.0.40, 10.0.0-M10 03.12.2020 SB2020120401
SB2020120509
SB2020120510
and 21 more
#VU47516 - Resource Management Errors
CVE-2020-13943
CWE-399 Medium
No
No
8.5.58, 9.0.38, 10.0.0-M8 12.10.2020 SB2020101213
SB2020110102
SB2020110603
and 6 more
#VU29724 - Resource Management Errors
CVE-2020-13934
CWE-399 Medium
No
No
8.5.57, 9.0.37, 10.0.0-M7 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 5 more
#VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13935
CWE-835 Medium
Public exploit available
No
7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 14.07.2020 SB2020071406
SB2020072801
SB2020072921
and 14 more
#VU29333 - Resource Management Errors
CVE-2020-11996
CWE-399 Medium
Public exploit available
No
8.5.56, 9.0.36, 10.0.0-M6 27.06.2020 SB2020062701
SB2020062802
SB2020072414
and 6 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484
CWE-502 High
Public exploit available
No
7.0.104, 8.5.55, 9.0.35, 10.0.0-M5 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more


Showing elements 81 - 100 out of 89