Read the docs
TI-2021-07400 Aliases CVE-2021-25122GHSA-j39c-c8hj-x4j3

Apache Tomcat h2c request mix-up

Priority MEDIUM 56CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 5 fixed, 7 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.

Summary

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.18114 97th percentileScored 2026-11-07
Fix Partial Apache Tomcat (Apache Software Foundation): 10.0.2, 9.0.42, 8.5.62org.apache.tomcat.embed:tomcat-embed-core (Maven): 10.0.2, 9.0.43, 8.5.63+1 more productRed Hat: 4 advisoriesRed Hat: 5 fixed, 7 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache TomcatApache Tomcat 10 to before 10.0.2; Apache Tomcat 9 to before 9.0.42; Apache Tomcat 8.5 to before 8.5.6210.0.2, 9.0.42, 8.5.62Patch availableCNA
—org.apache.tomcat.embed:tomcat-embed-core (Maven)10.0.0-M1 to before 10.0.210.0.2Patch availableGHSA-j39c-c8hj-x4j3
—org.apache.tomcat.embed:tomcat-embed-core (Maven)9.0.0-M1 to before 9.0.439.0.43Patch availableGHSA-j39c-c8hj-x4j3
—org.apache.tomcat.embed:tomcat-embed-core (Maven)8.5.0 to before 8.5.638.5.63Patch availableGHSA-j39c-c8hj-x4j3
—org.apache.tomcat:tomcat-coyote (Maven)10.0.0-M1 to before 10.0.210.0.2Patch availableGHSA-j39c-c8hj-x4j3
  • Apache Tomcat VendorApache Affected Apache Tomcat 10 to before 10.0.2; Apache Tomcat 9 to before 9.0.42; Apache Tomcat 8.5 to before 8.5.62 Fixed in 10.0.2, 9.0.42, 8.5.62 Patch available CNA
  • org.apache.tomcat.embed:tomcat-embed-core (Maven) Vendor— Affected 10.0.0-M1 to before 10.0.2 Fixed in 10.0.2 Patch available GHSA-j39c-c8hj-x4j3
  • org.apache.tomcat.embed:tomcat-embed-core (Maven) Vendor— Affected 9.0.0-M1 to before 9.0.43 Fixed in 9.0.43 Patch available GHSA-j39c-c8hj-x4j3
  • org.apache.tomcat.embed:tomcat-embed-core (Maven) Vendor— Affected 8.5.0 to before 8.5.63 Fixed in 8.5.63 Patch available GHSA-j39c-c8hj-x4j3
  • org.apache.tomcat:tomcat-coyote (Maven) Vendor— Affected 10.0.0-M1 to before 10.0.2 Fixed in 10.0.2 Patch available GHSA-j39c-c8hj-x4j3

CPE configurations NVD · 54

CPEVersionsRoleVendor
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*8.5.0 – 8.5.61; 9.0.0 – 9.0.41VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*9.0.0 milestone1VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*9.0.0 milestone10VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*9.0.0 milestone11VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*9.0.0 milestone12VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*9.0.0 milestone13VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*9.0.0 milestone14VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*9.0.0 milestone15VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*9.0.0 milestone16VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*9.0.0 milestone17VulnerableApache
  • cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* Versions 8.5.0 – 8.5.61; 9.0.0 – 9.0.41 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:* Versions 9.0.0 milestone1 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:* Versions 9.0.0 milestone10 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:* Versions 9.0.0 milestone11 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:* Versions 9.0.0 milestone12 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:* Versions 9.0.0 milestone13 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:* Versions 9.0.0 milestone14 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:* Versions 9.0.0 milestone15 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:* Versions 9.0.0 milestone16 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:* Versions 9.0.0 milestone17 Vulnerable ·Apache
Show 44 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*9.0.0 milestone18VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*9.0.0 milestone19VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*9.0.0 milestone2VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*9.0.0 milestone20VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*9.0.0 milestone21VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*9.0.0 milestone22VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*9.0.0 milestone23VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*9.0.0 milestone24VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*9.0.0 milestone25VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*9.0.0 milestone26VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*9.0.0 milestone27VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*9.0.0 milestone3VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*9.0.0 milestone4VulnerableApache
cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*9.0.0 milestone5VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:-:*:*:*:*:*:*10.0.0VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*10.0.0 milestone1VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:*10.0.0 milestone10VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*10.0.0 milestone2VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*10.0.0 milestone3VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*10.0.0 milestone4VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*10.0.0 milestone5VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*10.0.0 milestone6VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*10.0.0 milestone7VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*10.0.0 milestone8VulnerableApache
cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*10.0.0 milestone9VulnerableApache
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*9.3.3VulnerableOracle
cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*9.3.6VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*1.14.0VulnerableOracle
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableOracle
cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*10.0.1.5.0VulnerableOracle
cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*12.2.0.1VulnerableOracle
cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*19cVulnerableOracle
cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*21cVulnerableOracle
cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*before 21.3.0VulnerableOracle
cpe:2.3:a:oracle:graph_server_and_client:21.3.0:*:*:*:*:*:*:*21.3.0VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*17.1VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*17.2VulnerableOracle
cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*17.3VulnerableOracle
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*12.2.1.3.0VulnerableOracle
cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*12.2.1.4.0VulnerableOracle
cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*up to 8.0.23VulnerableOracle
cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*up to 21.9VulnerableOracle
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:* Versions 9.0.0 milestone18 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:* Versions 9.0.0 milestone19 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:* Versions 9.0.0 milestone2 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:* Versions 9.0.0 milestone20 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:* Versions 9.0.0 milestone21 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:* Versions 9.0.0 milestone22 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:* Versions 9.0.0 milestone23 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:* Versions 9.0.0 milestone24 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:* Versions 9.0.0 milestone25 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:* Versions 9.0.0 milestone26 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:* Versions 9.0.0 milestone27 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:* Versions 9.0.0 milestone3 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:* Versions 9.0.0 milestone4 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:* Versions 9.0.0 milestone5 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:-:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:* Versions 10.0.0 milestone1 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:* Versions 10.0.0 milestone10 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:* Versions 10.0.0 milestone2 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:* Versions 10.0.0 milestone3 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:* Versions 10.0.0 milestone4 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:* Versions 10.0.0 milestone5 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:* Versions 10.0.0 milestone6 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:* Versions 10.0.0 milestone7 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:* Versions 10.0.0 milestone8 Vulnerable ·Apache
  • cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:* Versions 10.0.0 milestone9 Vulnerable ·Apache
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:* Versions 9.3.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:* Versions 9.3.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:* Versions 1.14.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:* Versions 10.0.1.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:* Versions 19c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:* Versions 21c Vulnerable ·Oracle
  • cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:* Versions before 21.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:graph_server_and_client:21.3.0:*:*:*:*:*:*:* Versions 21.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* Versions 17.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* Versions 17.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* Versions 17.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* Versions up to 21.9 Vulnerable ·Oracle

Remediation

  • Fix · CNA Apache Tomcat (Apache Software Foundation) Fixed in 10.0.2, 9.0.42, 8.5.62
  • Fix · GHSA-j39c-c8hj-x4j3 org.apache.tomcat.embed:tomcat-embed-core (Maven) Fixed in 10.0.2 Advisory →
  • Fix · GHSA-j39c-c8hj-x4j3 org.apache.tomcat.embed:tomcat-embed-core (Maven) Fixed in 9.0.43 Advisory →
  • Fix · GHSA-j39c-c8hj-x4j3 org.apache.tomcat.embed:tomcat-embed-core (Maven) Fixed in 8.5.63 Advisory →
  • Fix · GHSA-j39c-c8hj-x4j3 org.apache.tomcat:tomcat-coyote (Maven) Fixed in 10.0.2 Advisory →

Red Hat 4 advisories

  • RHSA-2022:5532 Released 2022-07-07 · Red Hat rating Important
    Red Hat Fuse 7.11.0 release and security update
    • Red Hat Fuse 7.11
  • RHSA-2021:3425 Released 2021-09-09 · Red Hat rating Important
    Red Hat support for Spring Boot 2.3.10 security update
    • Red Hat support for Spring Boot 2.3.10
  • RHSA-2021:2561 Released 2021-06-29 · Red Hat rating Moderate
    Red Hat JBoss Web Server 5.5.0 Security release
    • Red Hat JBoss Web Server 5.5 for RHEL 7 Server jws5-ecj-4.12.0-3.redhat_2.2.el7jws, jws5-mod_cluster-1.4.3-2.Final_redhat_00002.1.el7jws, jws5-mod_cluster-tomcat-1.4.3-2.Final_redhat_00002.1.el7jws +15
    • Red Hat JBoss Web Server 5.5 for RHEL 8 jws5-ecj-4.12.0-3.redhat_2.2.el8jws, jws5-mod_cluster-1.4.3-2.Final_redhat_00002.1.el8jws, jws5-mod_cluster-tomcat-1.4.3-2.Final_redhat_00002.1.el8jws +13
Show 1 more Red Hat advisories
  • RHSA-2021:2562 Released 2021-06-29 · Red Hat rating Moderate
    Red Hat JBoss Web Server 5.5.0 security release
    • Red Hat JBoss Web Server 5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Apache Tomcat — DSA-4891

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Red Hat JBoss Data Grid 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Data Virtualization 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Enterprise Application Platform 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Fuse 6AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Will not fix
Red Hat Fuse 7.11Fixed RHSA-2022:5532
Red Hat JBoss Web Server 5Fixed RHSA-2021:2562
Red Hat JBoss Web Server 5.5 for RHEL 7 ServerFixed RHSA-2021:2561
Red Hat JBoss Web Server 5.5 for RHEL 8Fixed RHSA-2021:2561
Red Hat support for Spring Boot 2.3.10Fixed RHSA-2021:3425
Not affected: 5 products
  • Red Hat Decision Manager 7
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat JBoss Web Server 3
  • Red Hat Process Automation 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-25122
  2. 2026-10-03 Alias added: GHSA-j39c-c8hj-x4j3
  3. 2026-10-08 CISA SSVC decision points changed

References

Patch 3

Advisory 7

Other 15

  • TI-2025-18529 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT KEVCVSS 3.1CRITICAL 10.0
  • TI-2020-01862 Improper privilege management in Apache Tomcat KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-07192 Improper access control in Apache Tomcat KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2017-09340 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2026-26741 Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor KEVCVSS 3.1HIGH 7.5
See all 273 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences