Vendors / Apache Tomcat Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Apache Tomcat records in CISA KEV No Apache Tomcat vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02908 · Published 2006-05-21 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical0 High0 Medium1 Low0 No CVSS0