Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Apache Tomcat — DSA-3843 Clear all filters
TI-2017-03648 CVE-2017-5648 · GHSA-3vx3-xf6q-r5xp

Exposure of resource to wrong sphere in Apache Tomcat

Priority MEDIUM 54

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.13225 Published 2017-04-17 Partial fix · 9.0.0.M18, 8.5.13 +2 CWE-668
TI-2017-03647 CVE-2017-5647 · GHSA-3gv7-3h64-78cm

Information disclosure in Apache Tomcat

Priority MEDIUM 50

A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined reques…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1684 Published 2017-04-17 Partial fix · 9.0.0.M19, 8.5.13 +3 CWE-200