Known vulnerabilities in Apache Tomcat - page 4

Software: Apache Tomcat
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 151
Public exploits: 29
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Tomcat Apache Tomcat is affected by 151 known vulnerabilities: 1 critical, 11 high, 90 medium, 49 low Critical High Medium Low

Vulnerabilities (151)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100588 - Improper Authentication
CVE-2024-52316
CWE-287 Low
No
No
9.0.96, 10.1.31, 11.0.0 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU100587 - Resource Management Errors
CVE-2024-52317
CWE-399 Medium
Available
No
9.0.96, 10.1.31, 11.0.0 18.11.2024 SB2024111823
SB2024112550
SB2024121231
and 27 more
#VU97652 - Resource exhaustion
CVE-2024-38286
CWE-400 Medium
No
No
9.0.90, 10.1.25, 11.0.0-M21 23.09.2024 SB2024092355
SB2024100267
SB2024102808
and 26 more
#VU93732 - Resource Management Errors
CVE-2024-34750
CWE-399 Medium
No
No
9.0.90, 10.1.25, 11.0.0-M21 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672
CWE-400 Medium
No
No
8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU85619 - Exposure of sensitive information to an unauthorized actor
CVE-2024-21733
CWE-200 Medium
Available
No
8.5.64, 9.0.44 19.01.2024 SB2024011929
SB2024020819
SB2024030424
and 9 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
8.5.96, 9.0.83, 10.1.16, 11.0.0-M11 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
8.5.94, 9.0.81 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
8.5.94, 9.0.81, 10.1.14, 11.0.0-M12 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648
CWE-444 Medium
No
No
8.5.94, 9.0.81, 10.1.14, 11.0.0-M12 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
8.5.94, 9.0.81, 10.1.14, 11.0.0-M12 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080
CWE-601 Medium
Available
No
8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981
CWE-200 Medium
No
No
8.5.89, 9.0.75, 10.1.9, 11.0.0-M6 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709
CWE-770 Medium
No
No
8.5.88, 9.0.74, 10.1.8, 11.0.0-M5 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708
CWE-614 Low
No
No
8.5.86, 9.0.72, 10.1.6, 11.0.0-M3 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
8.5.85, 9.0.71, 10.1.5, 11.0.0-M3 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143
CWE-94 Medium
No
No
8.5.84, 9.0.69, 10.1.2 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252
CWE-444 Medium
No
No
8.5.83, 9.0.68, 10.0.27, 10.1.1 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU67714 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43980
CWE-200 Low
No
No
8.5.78, 9.0.62, 10.0.20, 10.1.0-M14 28.09.2022 SB2022092818
SB2022103001
SB2022111642
and 20 more


Showing elements 61 - 80 out of 151