Known vulnerabilities in Apache Tomcat - page 7

Software: Apache Tomcat
Software CPE: cpe:2.3:a:apache_foundation:apache_tomcat:*:*:*:*:*:*:*:*
Total vulnerabilities: 151
Public exploits: 29
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Tomcat Apache Tomcat is affected by 151 known vulnerabilities: 1 critical, 11 high, 90 medium, 49 low Critical High Medium Low

Vulnerabilities (151)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87536 - Cross-Site Request Forgery (CSRF)
CVE-2015-5351
CWE-352 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 5 more
#VU87535 - Session Fixation
CVE-2015-5346
CWE-384 High
No
No
7.0.66, 8.0.30, 9.0.0-M2 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU87534 - Permissions, Privileges, and Access Controls
CVE-2016-0763
CWE-264 Medium
No
No
7.0.68, 8.0.31, 9.0.0-M3 14.03.2024 SB2016021201
SB2024051523
SB2024052012
and 6 more
#VU6950 - Improper input validation
CVE-2017-5664
CWE-20 Low
No
No
- 06.06.2017 SB2017051109
SB2017060618
SB2017060619
and 23 more
#VU32077 - Improper input validation
CVE-2017-5969
CWE-20 Medium
No
No
- 11.04.2017 SB2017041154
SB2017061637
SB2017111019
#VU5449 - Resource Management Errors
CVE-2016-8745
CWE-399 Low
No
No
- 27.01.2017 SB2016121313
SB2017052404
SB2017032908
and 9 more
#VU1185 - Memory corruption
CVE-2016-6817
CWE-119 Medium
No
No
- 22.11.2016 SB2016112201
SB2022101411
SB2023022231
and 4 more
#VU1184 - Improper input validation
CVE-2016-6816
CWE-200 Low
Available
No
- 22.11.2016 SB2016112201
SB2017032908
SB2016121506
and 13 more
#VU1183 - Improper input validation
CVE-2016-8735
CWE-20 Medium
No
Exploited
- 22.11.2016 SB2016112201
SB2016121506
SB2016121507
and 7 more
#VU31830 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-9318
CWE-611 Low
No
No
- 16.11.2016 SB2016111607
SB2017041322
SB2017111019
and 3 more
#VU1090 - Improper Access Control
CVE-2016-6794
CWE-284 Low
No
No
- 28.10.2016 SB2016102804
SB2022101411
SB20200930122
and 1 more
#VU1091 - Resource Management Errors
CVE-2016-6797
CWE-399 Low
No
No
- 28.10.2016 SB2016102709
SB20200930122
SB2025051928
#VU1092 - Permissions, Privileges, and Access Controls
CVE-2016-6796
CWE-264 Low
No
No
- 28.10.2016 SB2017062606
SB2022101411
SB2023022231
and 3 more
#VU32142 - Data Handling
CVE-2016-5153
CWE-19 High
No
No
- 11.09.2016 SB2016091102
SB2017030127
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714
CWE-94 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345
CWE-200 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174
CWE-22 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU32290 - Memory corruption
CVE-2015-8241
CWE-119 Medium
No
No
- 15.12.2015 SB2015121504
SB2016060208
SB2015121403
#VU32381 - Resource Management Errors
CVE-2015-8035
CWE-399 Low
No
No
- 18.11.2015 SB2015111803
SB2020081271
SB2015112809
and 7 more


Showing elements 121 - 140 out of 151