Apache Jakarta Tomcat Schwachstellen

Zeitverlauf

Version

5.x4
3.2.12

Massnahmen

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined2

Ausnutzbarkeit

High0
Functional2
Proof-of-Concept0
Unproven0
Not Defined4

Zugriffsart

Not Defined0
Physical0
Local2
Adjacent0
Network4

Authentisierung

Not Defined0
High0
Low2
None4

Benutzeraktivität

Not Defined0
Required0
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤50
≤62
≤70
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤50
≤62
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤50
≤62
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k0
<10k4
<25k0
<50k2
<100k0
≥100k0

Exploit heute

<1k6
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

Affected Versions (10): 3.2.1, 4.0.1, 5.0, 5.5, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6

Link to Product Website: https://www.apache.org/

VeröffentlichtBaseTempSchwachstelle0dayHeuteAusMasCTICVE
21.11.20067.36.8Apache mod_auth_kerb bis 5.x der_get_oid() Off-by-One Pufferüberlauf$25k-$100k$0-$5kFunctionalOfficial Fix0.00CVE-2006-5989
14.03.20055.35.1Apache Jakarta Tomcat bis 5.x AJP12-Protokoll spezielle Anfrage Denial of Service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2005-0808
03.01.20056.36.1Apache Jakarta Tomcat bis 5.5.6 Messenger Cross Site Scripting$5k-$25k$0-$5kHighOfficial Fix0.03CVE-2005-4838
01.01.19993.33.3Apache Jakarta Tomcat Error Page Path Information Disclosure$5k-$25k$0-$5kNot DefinedNot Defined0.06
01.01.19993.33.3Apache Jakarta Tomcat Error Message Information Disclosure$5k-$25k$0-$5kNot DefinedNot Defined0.06

weitere Einträge von Apache

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!