Known vulnerabilities in Apache Tomcat - page 5
Vendor:
Apache Foundation
Software:
Apache Tomcat
Software CPE:
cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
151
Public exploits:
29
Known exploited (KEV):
8
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
10.1.59
11.0.25
9.0.121
10.1.58
11.0.24
10.1.57
9.0.120
9.0.119
11.0.23
10.1.56
10.1.55
11.0.22
9.0.118
11.0.21
10.1.54
9.0.117
10.1.53
11.0.20
9.0.116
11.0.19
10.1.52
11.0.18
10.1.51
9.0.115
11.0.17
9.0.114
11.0.16
10.1.50
11.0.15
9.0.113
10.1.49
9.0.112
11.0.14
9.1.109
11.0.13
10.1.48
9.0.111
10.1.47
11.0.12
9.0.110
10.1.46
10.1.45
11.0.11
9.0.109
10.1.44
11.0.10
9.0.108
9.0.107
11.0.9
10.1.43
11.0.8
10.1.42
9.0.106
10.1.41
9.0.105
11.0.7
9.0.104
11.0.6
10.1.40
9.0.103
10.1.39
10.1.38
9.0.102
9.0.101
10.1.37
11.0.5
11.0.4
10.1.36
9.0.100
10.1.35
9.0.99
11.0.3
9.0.98
11.0.2
10.1.34
10.1.33
10.1.32
11.0.1
9.0.97
11.0.0
10.1.31
9.0.96
10.1.30
11.0.0-M26
9.0.95
10.1.29
11.0.0-M25
9.0.94
9.0.93
10.1.28
11.0.0-M24
10.1.27
9.0.92
11.0.0-M23
10.1.26
11.0.0-M22
9.0.91
10.1.25
11.0.0-M21
9.0.90
10.1.24
9.0.89
11.0.0-M20
10.1.23
10.1.22
10.1.21
11.0.0-M19
9.0.88
8.5.100
10.1.20
9.0.87
11.0.0-M18
10.1.19
8.5.99
9.0.86
11.0.0-M17
10.1.18
8.5.98
9.0.85
11.0.0-M16
10.1.17
9.0.84
8.5.97
11.0.0-M15
10.1.16
8.5.96
11.0.0-M14
9.0.83
10.1.15
8.5.95
11.0.0-M13
9.0.82
11.0.0-M12
10.1.14
9.0.81
8.5.94
11.0.0-M11
10.1.13
9.0.80
8.5.93
8.5.92
10.1.12
9.0.79
11.0.0-M10
10.1.11
8.5.91
11.0.0-M9
9.0.78
9.0.77
11.0.0-M8
9.0.76
10.1.10
8.5.90
11.0.0-M7
10.1.9
8.5.89
9.0.75
11.0.0-M6
8.5.88
10.1.8
9.0.74
11.0.0-M5
11.0.0-M4
10.1.7
8.5.87
9.0.73
10.1.6
8.5.86
9.0.72
11.0.0-M3
8.5.85
9.0.71
10.1.5
11.0.0-M2
10.1.4
11.0.0-M1
10.1.3
9.0.70
8.5.84
10.1.2
9.0.69
8.5.83
9.0.68
10.0.27
10.1.1
10.0.26
9.0.67
10.1.0
10.0.25
9.0.66
10.1.0-M20
10.0.24
10.1.0-M19
10.1.0-M18
10.1.0-M17
10.0.23
9.0.65
8.5.82
8.0.0-RC10
5.5
5.5.36
8.5.81
8.5.80
9.0.64
10.1.0-M16
10.0.22
9.0.63
10.1.0-M15
10.0.21
8.5.79
10.1.0-M14
10.0.20
9.0.62
8.5.78
9.0.61
10.1.0-M13
10.0.19
8.5.77
10.1.0-M12
10.0.18
9.0.60
8.5.76
10.1.0-M11
10.0.17
9.0.59
8.5.75
10.1.0-M10
10.0.16
9.0.58
10.1.0-M9
10.0.15
9.0.57
8.5.74
10.0.14
10.1.0-M8
9.0.56
8.5.73
9.0.55
10.0.13
10.1.0-M7
8.6.72
8.5.72
9.0.54
10.0.12
10.1.0-M6
8.5.71
9.0.53
10.0.11
10.1.0-M5
8.5.70
10.1.0-M4
9.0.52
10.0.10
9.0.51
10.0.9
10.1.0-M3
8.5.69
9.0.50
9.0.49
10.0.8
10.1.0-M2
8.5.68
8.5.67
9.0.48
9.0.47
10.0.7
10.1.0-M1
8.5.66
9.0.46
10.0.6
7.0.109
8.5.65
9.0.45
10.0.5
10.0.4
8.5.64
9.0.44
10.0.3
8.5.63
9.0.43
10.0.2
7.0.108
8.5.62
9.0.42
10.0.1
8.5.61
9.0.41
10.0.0
7.0.107
8.5.60
9.0.40
10.0.0-M10
8.5.59
9.0.39
10.0.0-M9
7.0.106
8.5.58
9.0.38
10.0.0-M8
7.0.105
8.5.57
9.0.37
10.0.0-M7
8.5.56
9.0.36
10.0.0-M6
7.0.104
8.5.55
9.0.35
10.0.0-M5
8.5.54
9.0.34
10.0.0-M4
7.0.103
7.0.102
8.5.53
9.0.33
10.0.0-M3
7.0.101
8.5.52
9.0.32
10.0.0-M2
10.0.0-M1
7.0.100
9.0.0-M27
9.0.0-M26
9.0.0-M25
9.0.0-M24
9.0.0-M23
10.0.0.0-M1
8.5.51
9.0.31
7.0.99
8.5.50
9.0.30
7.0.98
8.5.49
8.5.48
9.0.28
9.0.29
7.0.97
8.5.47
9.0.27
8.5.46
9.0.26
9.0.25
8.5.44
8.5.45
9.0.23
9.0.24
7.0.96
7.0.95
8.5.43
9.0.22
1.2.3
1.2.17
1.2.46
1.2.43
1.2.42
1.2.41
1.2.27
1.2.23
1.2.21
1.2.16
9.0.21
9.0.20
9.0.18
9.0.17
9.0.15
9.0.3
9.0.0
8.5.42
8.5.41
8.5.39
8.5.27
8.5.26
8.5.25
8.5.15
8.5.8
8.5.7
7.0.93
7.0.92
7.0.89
7.0.83
7.0.74
9.0.19
8.5.40
7.0.94
8.5.38
8.5.37
8.5.36
8.5.35
9.0.16
9.0.14
9.0.13
7.0.91
8.5.34
8.5.33
9.0.12
9.0.11
6.0.53
6.0.52
6.0.51
6.0.50
6.0.49
7.0.90
9.0.10
9.0.8
9.0.7
9.0.6
8.5.31
8.5.30
8.5.29
8.0.52
8.0.51
7.0.88
7.0.87
7.0.86
9.0.9
8.5.32
8.5.28
8.5.24
8.0.53
8.0.50
8.0.48
8.0.46
8.0.45
8.5.22
8.5.21
8.5.20
8.5.19
8.5.18
8.5.17
8.5.16
9.0.0-M14
9.0.0-M16
9.0.0-M22
8.0.49
7.0.85
7.0.84
9.0.5
9.0.4
9.0.2
9.0.1
8.5.23
8.0.47
7.0.82
7.0.80
7.0.81
7.0.79
9.0.0-M21
9.0.0-M20
9.0.0-M19
9.0.0-M18
9.0.0-M17
7.0.78
8.0.44
8.5.14
8.5.13
8.5.12
8.5.11
8.5.10
8.0.43
8.0.42
7.0.77
7.0.76
9.0.0-M15
7.0.75
8.5.9
8.0.41
8.5.6
6.0.48
6.0.46
7.0.71
7.0.73
9.0.0-M13
9.0.0-M12
9.0.0-M11
8.0.39
8.0.38
9.0.0-M10
8.5.5
8.0.37
7.0.72
6.0.47
8.0.0.RC1
8.5.4
9.0.0-M9
9.0.0-M7
9.0.0-M5
9.0.0-M4
9.0.0-M3
9.0.0-M2
9.0.0-M1
8.5.1
8.5.0
8.0.34
8.0.33
8.0.32
8.0.31
8.0.30
8.0.29
8.0.28
8.0.27
8.0.26
8.0.25
8.0.24
8.0.23
8.0.22
8.0.21
8.0.20
8.0.19
8.0.18
8.0.17
8.0.16
8.0.15
8.0.14
8.0.13
8.0.12
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
7.0.68
7.0.67
7.0.66
7.0.65
7.0.64
7.0.63
7.0.62
7.0.61
7.0.60
7.0.59
7.0.58
7.0.57
7.0.56
7.0.55
7.0.54
7.0.53
7.0.52
7.0.51
7.0.50
7.0.49
7.0.48
7.0.47
7.0.46
7.0.45
7.0.44
7.0.43
7.0.42
7.0.41
7.0.40
7.0.39
7.0.38
7.0.37
7.0.36
7.0.35
7.0.34
7.0.33
7.0.32
7.0.31
7.0.30
7.0.29
7.0.28
7.0.27
7.0.26
7.0.25
7.0.24
7.0.23
7.0.22
7.0.21
7.0.20
7.0.19
7.0.18
7.0.17
7.0.16
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.0.45
6.0.44
6.0.43
6.0.42
6.0.41
6.0.40
6.0.39
6.0.38
6.0.37
6.0.36
6.0.35
6.0.34
6.0.33
6.0.32
6.0.31
6.0.30
6.0.29
6.0.28
6.0.27
6.0.26
6.0.25
6.0.24
6.0.23
6.0.22
6.0.21
6.0.20
6.0.19
6.0.18
6.0.17
6.0.16
6.0.15
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
9.0.0-M8
9.0.0-M6
8.5.3
8.5.2
8.0.36
8.0.35
7.0.70
7.0.69
Vulnerabilities (151)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-34305 |
CWE-79 | Medium | 8.5.82, 9.0.65, 10.0.23, 10.1.0-M17 | 23.06.2022 |
SB2022062338 SB2022071177 SB2022071801 and 26 more |
||
| #VU63299 - Error Handling CVE-2022-25762 |
CWE-388 | Medium | 8.5.76, 9.0.21 | 17.05.2022 |
SB2022051715 SB2022071173 SB2022072094 and 14 more |
||
| #VU63225 - Data Handling CVE-2022-29885 |
CWE-19 | Low | 8.5.79, 9.0.63, 10.0.21, 10.1.0-M15 | 16.05.2022 |
SB2022051612 SB2022072044 SB20220720107 and 19 more |
||
| #VU60079 - Permissions, Privileges, and Access Controls CVE-2022-23181 |
CWE-264 | Low | 8.5.75, 9.0.58, 10.0.15, 10.1.0-M10 | 27.01.2022 |
SB2022012708 SB2022030854 SB2022041951 and 25 more |
||
| #VU57389 - Resource exhaustion CVE-2021-42340 |
CWE-400 | Medium | 8.5.72, 9.0.54, 10.0.12, 10.1.0-M6 | 15.10.2021 |
SB2021101507 SB2021110507 SB2021111711 and 28 more |
||
| #VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-41079 |
CWE-835 | Medium | 8.5.64, 9.0.44, 10.0.4 | 15.09.2021 |
SB2021091527 SB2021100721 SB2021101512 and 16 more |
||
| #VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33037 |
CWE-444 | Medium | 8.5.68, 9.0.48, 10.0.7 | 29.07.2021 |
SB2021072907 SB2021080807 SB2021080808 and 30 more |
||
| #VU55422 - Improper Handling of Exceptional Conditions CVE-2021-30639 |
CWE-755 | Medium | 8.5.65, 9.0.45, 10.0.5 | 29.07.2021 |
SB2021072906 SB2021072908 SB2022011825 and 6 more |
||
| #VU55417 - Improper Authentication CVE-2021-30640 |
CWE-287 | Medium | 7.0.109, 8.5.66, 9.0.46, 10.0.6 | 29.07.2021 |
SB2021072901 SB2021072902 SB2021081231 and 14 more |
||
| #VU51014 - Resource Management Errors CVE-2021-25122 |
CWE-399 | Medium | 8.5.63, 9.0.43, 10.0.2 | 01.03.2021 |
SB2021030115 SB2021031619 SB2021032519 and 23 more |
||
| #VU51012 - Deserialization of Untrusted Data CVE-2021-25329 |
CWE-502 | Medium | 7.0.108, 8.5.63, 9.0.43, 10.0.2 | 01.03.2021 |
SB2021030115 SB2021031620 SB2021040723 and 16 more |
||
| #VU49570 - Exposure of sensitive information to an unauthorized actor CVE-2021-24122 |
CWE-200 | Medium | 7.0.107, 8.5.60, 9.0.40, 10.0.0-M10 | 14.01.2021 |
SB2021011807 SB2021072821 SB2022012734 and 5 more |
||
| #VU48779 - Resource Management Errors CVE-2020-17527 |
CWE-399 | Medium | 8.5.60, 9.0.40, 10.0.0-M10 | 03.12.2020 |
SB2020120401 SB2020120509 SB2020120510 and 21 more |
||
| #VU47516 - Resource Management Errors CVE-2020-13943 |
CWE-399 | Medium | 8.5.58, 9.0.38, 10.0.0-M8 | 12.10.2020 |
SB2020101213 SB2020110102 SB2020110603 and 6 more |
||
| #VU29724 - Resource Management Errors CVE-2020-13934 |
CWE-399 | Medium | 8.5.57, 9.0.37, 10.0.0-M7 | 14.07.2020 |
SB2020071406 SB2020072801 SB2020072921 and 5 more |
||
| #VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-13935 |
CWE-835 | Medium | 7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 | 14.07.2020 |
SB2020071406 SB2020072801 SB2020072921 and 14 more |
||
| #VU29333 - Resource Management Errors CVE-2020-11996 |
CWE-399 | Medium | 8.5.56, 9.0.36, 10.0.0-M6 | 27.06.2020 |
SB2020062701 SB2020062802 SB2020072414 and 6 more |
||
| #VU28158 - Deserialization of Untrusted Data CVE-2020-9484 |
CWE-502 | High | 7.0.104, 8.5.55, 9.0.35, 10.0.0-M5 | 21.05.2020 |
SB2020052124 SB2020052501 SB2020053102 and 47 more |
||
| #VU25807 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-1935 |
CWE-444 | Medium | 7.0.100, 8.5.51, 9.0.31 | 06.03.2020 |
SB2020022111 SB2020031401 SB2020031402 and 15 more |
||
| #VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-1938 |
CWE-22 | High | 7.0.100, 8.5.51, 9.0.31 | 21.02.2020 |
SB2020022111 SB2020031401 SB2020031402 and 31 more |
Showing elements 81 - 100 out of 151