Apache Tomcat 脆弱性

タイムライン

去年

バージョン

8.5.064
8.5.164
8.5.264
8.5.364
8.5.464

修復

Official Fix170
Temporary Fix0
Workaround4
Unavailable0
Not Defined54

悪用可能性

High13
Functional1
Proof-of-Concept57
Unproven20
Not Defined137

アクセスベクター

Not Defined0
Physical0
Local23
Adjacent7
Network198

認証

Not Defined0
High5
Low31
None192

ユーザー操作

Not Defined0
Required28
None200

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤413
≤529
≤688
≤745
≤838
≤912
≤103

CVSSv3 Temp

≤10
≤20
≤31
≤423
≤544
≤676
≤740
≤836
≤96
≤102

VulDB

≤10
≤20
≤33
≤418
≤528
≤695
≤724
≤850
≤95
≤105

NVD

≤10
≤20
≤30
≤41
≤59
≤611
≤76
≤838
≤98
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k0
<2k4
<5k10
<10k93
<25k116
<50k5
<100k0
≥100k0

本日のエクスプロイト

<1k184
<2k12
<5k16
<10k16
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

去年

🔴 CTI アクティビティ

Affected Versions (658): 1, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.15, 1.1.16, 1.1.17, 1.1.18, 1.1.19, 1.1.21, 1.1.22, 1.1.23, 1.1.24, 1.1.25, 1.1.26, 1.1.27, 1.1.28, 1.1.29, 1.1.31, 1.1.32, 1.1.33, 1.1.34, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.2.11, 1.2.12, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.21, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.26, 1.2.27, 1.2.28, 1.2.29, 1.2.31, 1.2.32, 1.2.33, 1.2.34, 1.2.35, 1.2.36, 1.2.37, 1.2.38, 1.2.39, 1.2.41, 1.2.42, 1.2.43, 1.2.44, 1.2.45, 1.2.46, 1.2.47, 1.2.48, 3.0, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.3, 3.3.1, 3.3.1a, 3.3.2, 4, 4.0, 4.0.0 b1, 4.0.0 b2, 4.0.0 b3, 4.0.0 b4, 4.0.0 b5, 4.0.0 b6, 4.0.0 b7, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.11, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 4.1.16, 4.1.17, 4.1.18, 4.1.19, 4.1.21, 4.1.22, 4.1.23, 4.1.24, 4.1.25, 4.1.26, 4.1.27, 4.1.28, 4.1.29, 4.1.31, 4.1.32, 4.1.33, 4.1.34, 4.1.35, 4.1.36, 4.1.37, 4.1.39, 5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.15, 5.0.16, 5.0.17, 5.0.18, 5.0.19, 5.0.21, 5.0.22, 5.0.23, 5.0.24, 5.0.25, 5.0.26, 5.0.27, 5.0.28, 5.0.29, 5.1, 5.2, 5.3, 5.4, 5.5, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.15, 5.5.16, 5.5.17, 5.5.18, 5.5.19, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.5.25, 5.5.26, 5.5.32, 5.5.33, 5.5.35, 6, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.0.16, 6.0.17, 6.0.18, 6.0.19, 6.0.21, 6.0.22, 6.0.23, 6.0.24, 6.0.25, 6.0.26, 6.0.27, 6.0.28, 6.0.29, 6.0.31, 6.0.32, 6.0.33, 6.0.34, 6.0.35, 6.0.36, 6.0.37, 6.0.38, 6.0.39, 6.0.41, 6.0.42, 6.0.43, 6.0.44, 6.0.45, 6.0.46, 6.0.47, 6.0.48, 6.0.49, 6.0.51, 6.0.52, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.11, 7.0.12, 7.0.13, 7.0.14, 7.0.15, 7.0.16, 7.0.17, 7.0.18, 7.0.19, 7.0.21, 7.0.22, 7.0.23, 7.0.24, 7.0.25, 7.0.26, 7.0.27, 7.0.28, 7.0.29, 7.0.31, 7.0.32, 7.0.33, 7.0.34, 7.0.35, 7.0.36, 7.0.37, 7.0.38, 7.0.39, 7.0.41, 7.0.42, 7.0.43, 7.0.44, 7.0.45, 7.0.46, 7.0.47, 7.0.48, 7.0.49, 7.0.51, 7.0.52, 7.0.53, 7.0.54, 7.0.55, 7.0.56, 7.0.57, 7.0.58, 7.0.59, 7.0.61, 7.0.62, 7.0.63, 7.0.64, 7.0.65, 7.0.66, 7.0.67, 7.0.68, 7.0.69, 7.0.71, 7.0.72, 7.0.73, 7.0.74, 7.0.75, 7.0.76, 7.0.77, 7.0.78, 7.0.79, 7.0.81, 7.0.82, 7.0.83, 7.0.84, 7.0.85, 7.0.86, 7.0.87, 7.0.88, 7.0.89, 7.0.91, 7.0.92, 7.0.93, 7.0.94, 7.0.95, 7.0.96, 7.0.97, 7.0.98, 7.0.99, 7.0.103, 7.0.104, 7.0.106, 7.0.107, 8, 8.0, 8.0.0-RC9, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.31, 8.0.32, 8.0.33, 8.0.34, 8.0.35, 8.0.36, 8.0.37, 8.0.38, 8.0.39, 8.0.41, 8.0.42, 8.0.43, 8.0.44, 8.0.45, 8.0.46, 8.0.47, 8.0.48, 8.0.49, 8.0.51, 8.0.52, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.5.14, 8.5.15, 8.5.16, 8.5.17, 8.5.18, 8.5.19, 8.5.21, 8.5.22, 8.5.23, 8.5.24, 8.5.25, 8.5.26, 8.5.27, 8.5.28, 8.5.29, 8.5.31, 8.5.32, 8.5.33, 8.5.34, 8.5.35, 8.5.36, 8.5.37, 8.5.38, 8.5.39, 8.5.41, 8.5.42, 8.5.43, 8.5.44, 8.5.45, 8.5.46, 8.5.47, 8.5.48, 8.5.49, 8.5.51, 8.5.52, 8.5.53, 8.5.54, 8.5.55, 8.5.56, 8.5.57, 8.5.58, 8.5.59, 8.5.61, 8.5.62, 8.5.63, 8.5.64, 8.5.65, 8.5.66, 8.5.67, 8.5.68, 8.5.69, 8.5.71, 8.5.72, 8.5.73, 8.5.74, 8.5.75, 8.5.76, 8.5.77, 8.5.78, 8.5.79, 8.5.81, 8.5.82, 8.5.83, 8.5.84, 8.5.85, 8.5.86, 8.5.87, 8.5.88, 8.5.89, 8.5.91, 8.5.92, 8.5.93, 8.5.94, 8.5.95, 8.5.96, 8.5.97, 8.5.98, 9, 9.0, 9.0.0.1, 9.0.0.2, 9.0.0.3, 9.0.0.4, 9.0.0.5, 9.0.0.6, 9.0.0.7, 9.0.0.8, 9.0.0.9, 9.0.0.11, 9.0.0.12, 9.0.0.13, 9.0.0.14, 9.0.0.15, 9.0.0.16, 9.0.0.17, 9.0.0.M1, 9.0.0.M2, 9.0.0.M3, 9.0.0.M4, 9.0.0.M5, 9.0.0.M6, 9.0.0.M7, 9.0.0.M8, 9.0.0.M9, 9.0.0.M11, 9.0.0.M12, 9.0.0.M13, 9.0.0.M14, 9.0.0.M15, 9.0.0.M17, 9.0.0.M18, 9.0.0.M21, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.21, 9.0.22, 9.0.23, 9.0.24, 9.0.25, 9.0.26, 9.0.27, 9.0.28, 9.0.29, 9.0.31, 9.0.32, 9.0.33, 9.0.34, 9.0.35, 9.0.36, 9.0.37, 9.0.38, 9.0.39, 9.0.41, 9.0.42, 9.0.43, 9.0.44, 9.0.45, 9.0.46, 9.0.47, 9.0.48, 9.0.49, 9.0.51, 9.0.52, 9.0.53, 9.0.54, 9.0.55, 9.0.56, 9.0.57, 9.0.58, 9.0.59, 9.0.61, 9.0.62, 9.0.63, 9.0.64, 9.0.65, 9.0.66, 9.0.67, 9.0.68, 9.0.69, 9.0.71, 9.0.72, 9.0.73, 9.0.74, 9.0.75, 9.0.76, 9.0.77, 9.0.78, 9.0.79, 9.0.81, 9.0.82, 9.0.83, 9.0.84, 9.0.85, 10.0, 10.0.0-M1, 10.0.0-M4, 10.0.0-M5, 10.0.0-M6, 10.0.0-M7, 10.0.0-M9, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.0.11, 10.0.12, 10.0.13, 10.0.14, 10.0.15, 10.0.16, 10.0.17, 10.0.18, 10.0.19, 10.0.21, 10.0.22, 10.0.23, 10.0.24, 10.0.25, 10.0.26, 10.1, 10.1.0-M5, 10.1.0-M8, 10.1.0-M12, 10.1.0-M14, 10.1.0-M16, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.1.9, 10.1.11, 10.1.12, 10.1.13, 10.1.14, 10.1.15, 10.1.16, 10.1.17, 10.1.18, 11.0.0-M1, 11.0.0-M2, 11.0.0-M5, 11.0.0-M11, 11.0.0-M16

Link to Product Website: https://www.apache.org/

ソフトウェアタイプ: Application Server Software

公開済みBaseTemp脆弱性0day本日修復CTICVE
2024年03月22日7.87.5Apache Tomcat Local Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-22029
2024年03月13日5.35.1Apache Tomcat Websocket サービス拒否$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2024-23672
2024年03月13日5.35.1Apache Tomcat HTTP/2 Request サービス拒否$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-24549
2024年01月19日4.84.7Apache Tomcat Incomplete POST Request 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-21733
2023年11月28日6.46.3Apache Tomcat HTTP Trailer Header 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-46589
2023年10月10日5.35.2Apache Tomcat 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-45648
2023年10月10日5.55.4Apache Tomcat Commons FileUpload サービス拒否$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-42794
2023年10月10日5.35.2Apache Tomcat Recycling 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2023-42795
2023年09月14日4.24.2Apache Tomcat JSS サービス拒否$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2022-4132
2023年09月13日6.56.4Apache Tomcat mod_jk 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2023-41081
2023年08月26日4.34.3Apache Tomcat FORM Authentication Redirect$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41080
2023年06月21日5.55.4Apache Tomcat Response Header 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-34981
2023年05月22日6.46.4Apache Tomcat Incomplete Fix CVE-2023-2499 メモリ破損$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2023-28709
2023年03月22日4.03.9Apache Tomcat RemoteIpFilter 情報の漏洩$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-28708
2023年01月03日6.56.4Apache Tomcat JsonErrorReportValve 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-45143
2022年11月01日7.47.2Apache Tomcat Header 特権昇格$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-42252
2022年09月28日3.13.1Apache Tomcat Client Connection 競合状態$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-43980
2022年06月23日3.53.4Apache Tomcat Form Authentication Example クロスサイトスクリプティング$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-34305
2022年05月13日4.34.1Apache Tomcat WebSocket Message サービス拒否$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-25762
2022年05月12日5.35.2Apache Tomcat EncryptInterceptor サービス拒否$5k-$25k$0-$5kNot DefinedWorkaround0.02CVE-2022-29885
2022年01月27日4.54.3Apache Tomcat Fix CVE-2020-9484 競合状態$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-23181
2021年10月15日4.34.1Apache Tomcat HTTP Upgrade OutOfMemoryError サービス拒否$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-42340
2021年09月16日5.35.3Apache Tomcat TLS Packet サービス拒否$5k-$25k$0-$5kNot DefinedNot Defined0.03CVE-2021-41079
2021年07月12日5.55.5Apache Tomcat JNDI Realm 弱い認証$5k-$25k$0-$5kNot DefinedNot Defined0.02CVE-2021-30640
2021年07月12日4.34.3Apache Tomcat Error O サービス拒否$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2021-30639

203 非表示のエントリあり

エントリの検索キーワード: Apache

Interested in the pricing of exploits?

See the underground prices here!