Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Tomcat 8.5.0 Clear all filters
TI-2023-24449 CVE-2023-45648 · GHSA-r6j3-px5g-cq3x

Apache Tomcat: Trailer header parsing too lenient

Priority LOW 39

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05883 Published 2023-10-10 Partial fix · 11.0.0-M12, 10.1.14 +2 CWE-20
TI-2023-22886 CVE-2023-42795 · GHSA-g8pj-r55q-5c2v

Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

Priority LOW 35

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02515 Published 2023-10-10 Partial fix · 11.0.0-M12, 10.1.14 +2 CWE-459