Known vulnerabilities in Apache Tomcat 7.0.36 - page 2

Software: Apache Tomcat
Version: 7.0.36
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 32
Public exploits: 9
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache Tomcat version 7.0.36 Apache Tomcat 7.0.36 is affected by 32 vulnerabilities: 6 high, 9 medium, 17 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87536 - Cross-Site Request Forgery (CSRF)
CVE-2015-5351
CWE-352 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 5 more
#VU87535 - Session Fixation
CVE-2015-5346
CWE-384 High
No
No
7.0.66, 8.0.30, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU87534 - Permissions, Privileges, and Access Controls
CVE-2016-0763
CWE-264 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M3 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU8697 - Improper input validation
CVE-2017-7674
CWE-20 Low
No
No
- 05.10.2017 SB2017070102
SB2017100501
SB2017100209
and 12 more
#VU6950 - Improper input validation
CVE-2017-5664
CWE-20 Low
No
No
- 06.06.2017 SB2017051109
SB2017060618
SB2017060619
and 23 more
#VU5449 - Resource Management Errors
CVE-2016-8745
CWE-399 Low
No
No
- 27.01.2017 SB2016121313
SB2017052404
SB2017032908
and 9 more
#VU1184 - Improper input validation
CVE-2016-6816
CWE-200 Low
Public exploit available
No
- 22.11.2016 SB2016112201
SB2017032908
SB2016121506
and 13 more
#VU1183 - Improper input validation
CVE-2016-8735
CWE-20 Medium
No
Exploited
- 22.11.2016 SB2016112201
SB2016121506
SB2016121507
and 7 more
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714
CWE-94 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174
CWE-22 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more


Showing elements 21 - 40 out of 32