Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Tomcat 8.5.0 Clear all filters
TI-2025-32628 CVE-2025-52520 · GHSA-wr62-c79q-cv37

Apache Tomcat: DoS via integer overflow in multipart file upload

Priority MEDIUM 43

For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02198 Published 2025-07-10 Partial fix · 11.0.9, 10.1.43 +1 CWE-190
TI-2025-32571 CVE-2025-52434 · GHSA-4j3c-42xv-3f84

Apache Tomcat: APR/Native Connector crash leading to DoS

Priority MEDIUM 43

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02074 Published 2025-07-10 Partial fix · 9.0.107 CWE-362