Known vulnerabilities in Apache Tomcat - page 6

Software: Apache Tomcat
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 151
Public exploits: 29
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Tomcat Apache Tomcat is affected by 151 known vulnerabilities: 1 critical, 11 high, 90 medium, 49 low Critical High Medium Low

Vulnerabilities (151)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569
CWE-444 Medium
No
No
7.0.100, 8.5.51, 9.0.31 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
7.0.99, 8.5.50, 9.0.30 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU25000 - Permissions, Privileges, and Access Controls
CVE-2019-12418
CWE-264 Low
No
No
7.0.99, 8.5.49, 9.0.29 06.02.2020 SB2019112222
SB2020011492
SB2020011519
and 4 more
#VU18638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0221
CWE-79 Low
Available
No
7.0.94, 8.5.40, 9.0.19 30.05.2019 SB2019041101
SB2019070106
SB2019072501
and 13 more
#VU18236 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-0232
CWE-78 High
Available
Exploited
7.0.94, 8.5.40, 9.0.19 11.04.2019 SB2019041101
SB2019052003
SB2020012015
and 5 more
#VU18067 - Resource exhaustion
CVE-2019-0199
CWE-400 Medium
No
No
8.5.38, 9.0.16 25.03.2019 SB2019020812
SB2019052003
SB2019070106
and 10 more
#VU15156 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-11784
CWE-601 Low
Available
No
7.0.91, 8.5.34, 9.0.12 05.10.2018 SB2018100401
SB2018102605
SB2018110806
and 13 more
#VU13993 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8037
CWE-200 Low
No
No
9.0.10 24.07.2018 SB2018072404
SB2018081002
SB2018082907
and 8 more
#VU13992 - Permissions, Privileges, and Access Controls
CVE-2018-8034
CWE-264 Low
No
No
7.0.90, 9.0.10 25.06.2018 SB2018072404
SB2018081002
SB2018081005
and 13 more
#VU12798 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8014
CWE-200 Low
No
No
8.0.53, 8.5.32, 9.0.9 17.05.2018 SB2018051706
SB2018081002
SB2018081005
and 12 more
#VU13986 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-1336
CWE-835 Medium
No
No
7.0.88, 8.0.52, 8.5.31, 9.0.8 16.05.2018 SB2018051612
SB2018080607
SB2018080608
and 12 more
#VU10707 - Permissions, Privileges, and Access Controls
CVE-2018-1304
CWE-264 Low
No
No
7.0.85, 8.0.50, 8.5.28, 9.0.5 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 11 more
#VU10706 - Permissions, Privileges, and Access Controls
CVE-2018-1305
CWE-264 Low
No
No
- 26.02.2018 SB2018022601
SB2018032308
SB2018032107
and 8 more
#VU8698 - Improper input validation
CVE-2017-7675
CWE-20 Low
No
No
- 05.10.2017 SB2017070102
SB2017100501
SB2017091606
and 1 more
#VU8697 - Improper input validation
CVE-2017-7674
CWE-20 Low
No
No
- 05.10.2017 SB2017070102
SB2017100501
SB2017100209
and 12 more
#VU8669 - Improper input validation
CVE-2017-12617
CWE-20 High
Available
Exploited
- 04.10.2017 SB2017100401
SB2017102604
SB2017112403
and 20 more
#VU8543 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12616
CWE-200 Low
No
No
- 21.09.2017 SB2017092101
SB2017092116
SB2017112404
and 2 more
#VU8541 - Improper input validation
CVE-2017-12615
CWE-20 High
Available
Exploited
- 21.09.2017 SB2017092101
SB2017112404
SB2018020603
and 10 more
#VU6675 - Improper Access Control
CVE-2017-5648
CWE-284 Low
No
No
- 24.05.2017 SB2017052404
SB2017111701
SB2017111702
and 10 more
#VU1093 - Permissions, Privileges, and Access Controls
CVE-2016-5018
CWE-264 Low
Available
No
- 28.10.2016 SB2017062606
SB2022101411
SB20200930122
and 1 more


Showing elements 101 - 120 out of 151