Apache Tomcat Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

8.5.064
8.5.164
8.5.264
8.5.364
8.5.464

Przeciwdziałanie

Official Fix170
Temporary Fix0
Workaround4
Unavailable0
Not Defined54

Wykorzystywanie

High15
Functional1
Proof-of-Concept55
Unproven20
Not Defined137

Wektor dostępu

Not Defined0
Physical0
Local23
Adjacent7
Network198

Uwierzytelnianie

Not Defined0
High5
Low31
None192

Interakcja z użytkownikiem

Not Defined0
Required28
None200

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤413
≤529
≤688
≤745
≤838
≤912
≤103

CVSSv3 Temp

≤10
≤20
≤31
≤423
≤544
≤676
≤740
≤836
≤96
≤102

VulDB

≤10
≤20
≤33
≤418
≤528
≤695
≤724
≤850
≤95
≤105

NVD

≤10
≤20
≤30
≤41
≤59
≤611
≤76
≤838
≤98
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k4
<5k10
<10k93
<25k116
<50k5
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k184
<2k11
<5k18
<10k12
<25k3
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (658): 1, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.11, 1.1.12, 1.1.13, 1.1.14, 1.1.15, 1.1.16, 1.1.17, 1.1.18, 1.1.19, 1.1.21, 1.1.22, 1.1.23, 1.1.24, 1.1.25, 1.1.26, 1.1.27, 1.1.28, 1.1.29, 1.1.31, 1.1.32, 1.1.33, 1.1.34, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9, 1.2.11, 1.2.12, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.21, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.26, 1.2.27, 1.2.28, 1.2.29, 1.2.31, 1.2.32, 1.2.33, 1.2.34, 1.2.35, 1.2.36, 1.2.37, 1.2.38, 1.2.39, 1.2.41, 1.2.42, 1.2.43, 1.2.44, 1.2.45, 1.2.46, 1.2.47, 1.2.48, 3.0, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.3, 3.3.1, 3.3.1a, 3.3.2, 4, 4.0, 4.0.0 b1, 4.0.0 b2, 4.0.0 b3, 4.0.0 b4, 4.0.0 b5, 4.0.0 b6, 4.0.0 b7, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.11, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 4.1.16, 4.1.17, 4.1.18, 4.1.19, 4.1.21, 4.1.22, 4.1.23, 4.1.24, 4.1.25, 4.1.26, 4.1.27, 4.1.28, 4.1.29, 4.1.31, 4.1.32, 4.1.33, 4.1.34, 4.1.35, 4.1.36, 4.1.37, 4.1.39, 5, 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.15, 5.0.16, 5.0.17, 5.0.18, 5.0.19, 5.0.21, 5.0.22, 5.0.23, 5.0.24, 5.0.25, 5.0.26, 5.0.27, 5.0.28, 5.0.29, 5.1, 5.2, 5.3, 5.4, 5.5, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.15, 5.5.16, 5.5.17, 5.5.18, 5.5.19, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.5.25, 5.5.26, 5.5.32, 5.5.33, 5.5.35, 6, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.0.16, 6.0.17, 6.0.18, 6.0.19, 6.0.21, 6.0.22, 6.0.23, 6.0.24, 6.0.25, 6.0.26, 6.0.27, 6.0.28, 6.0.29, 6.0.31, 6.0.32, 6.0.33, 6.0.34, 6.0.35, 6.0.36, 6.0.37, 6.0.38, 6.0.39, 6.0.41, 6.0.42, 6.0.43, 6.0.44, 6.0.45, 6.0.46, 6.0.47, 6.0.48, 6.0.49, 6.0.51, 6.0.52, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.11, 7.0.12, 7.0.13, 7.0.14, 7.0.15, 7.0.16, 7.0.17, 7.0.18, 7.0.19, 7.0.21, 7.0.22, 7.0.23, 7.0.24, 7.0.25, 7.0.26, 7.0.27, 7.0.28, 7.0.29, 7.0.31, 7.0.32, 7.0.33, 7.0.34, 7.0.35, 7.0.36, 7.0.37, 7.0.38, 7.0.39, 7.0.41, 7.0.42, 7.0.43, 7.0.44, 7.0.45, 7.0.46, 7.0.47, 7.0.48, 7.0.49, 7.0.51, 7.0.52, 7.0.53, 7.0.54, 7.0.55, 7.0.56, 7.0.57, 7.0.58, 7.0.59, 7.0.61, 7.0.62, 7.0.63, 7.0.64, 7.0.65, 7.0.66, 7.0.67, 7.0.68, 7.0.69, 7.0.71, 7.0.72, 7.0.73, 7.0.74, 7.0.75, 7.0.76, 7.0.77, 7.0.78, 7.0.79, 7.0.81, 7.0.82, 7.0.83, 7.0.84, 7.0.85, 7.0.86, 7.0.87, 7.0.88, 7.0.89, 7.0.91, 7.0.92, 7.0.93, 7.0.94, 7.0.95, 7.0.96, 7.0.97, 7.0.98, 7.0.99, 7.0.103, 7.0.104, 7.0.106, 7.0.107, 8, 8.0, 8.0.0-RC9, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15, 8.0.16, 8.0.17, 8.0.18, 8.0.19, 8.0.21, 8.0.22, 8.0.23, 8.0.24, 8.0.25, 8.0.26, 8.0.27, 8.0.28, 8.0.29, 8.0.31, 8.0.32, 8.0.33, 8.0.34, 8.0.35, 8.0.36, 8.0.37, 8.0.38, 8.0.39, 8.0.41, 8.0.42, 8.0.43, 8.0.44, 8.0.45, 8.0.46, 8.0.47, 8.0.48, 8.0.49, 8.0.51, 8.0.52, 8.5, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.5.5, 8.5.6, 8.5.7, 8.5.8, 8.5.9, 8.5.11, 8.5.12, 8.5.13, 8.5.14, 8.5.15, 8.5.16, 8.5.17, 8.5.18, 8.5.19, 8.5.21, 8.5.22, 8.5.23, 8.5.24, 8.5.25, 8.5.26, 8.5.27, 8.5.28, 8.5.29, 8.5.31, 8.5.32, 8.5.33, 8.5.34, 8.5.35, 8.5.36, 8.5.37, 8.5.38, 8.5.39, 8.5.41, 8.5.42, 8.5.43, 8.5.44, 8.5.45, 8.5.46, 8.5.47, 8.5.48, 8.5.49, 8.5.51, 8.5.52, 8.5.53, 8.5.54, 8.5.55, 8.5.56, 8.5.57, 8.5.58, 8.5.59, 8.5.61, 8.5.62, 8.5.63, 8.5.64, 8.5.65, 8.5.66, 8.5.67, 8.5.68, 8.5.69, 8.5.71, 8.5.72, 8.5.73, 8.5.74, 8.5.75, 8.5.76, 8.5.77, 8.5.78, 8.5.79, 8.5.81, 8.5.82, 8.5.83, 8.5.84, 8.5.85, 8.5.86, 8.5.87, 8.5.88, 8.5.89, 8.5.91, 8.5.92, 8.5.93, 8.5.94, 8.5.95, 8.5.96, 8.5.97, 8.5.98, 9, 9.0, 9.0.0.1, 9.0.0.2, 9.0.0.3, 9.0.0.4, 9.0.0.5, 9.0.0.6, 9.0.0.7, 9.0.0.8, 9.0.0.9, 9.0.0.11, 9.0.0.12, 9.0.0.13, 9.0.0.14, 9.0.0.15, 9.0.0.16, 9.0.0.17, 9.0.0.M1, 9.0.0.M2, 9.0.0.M3, 9.0.0.M4, 9.0.0.M5, 9.0.0.M6, 9.0.0.M7, 9.0.0.M8, 9.0.0.M9, 9.0.0.M11, 9.0.0.M12, 9.0.0.M13, 9.0.0.M14, 9.0.0.M15, 9.0.0.M17, 9.0.0.M18, 9.0.0.M21, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.21, 9.0.22, 9.0.23, 9.0.24, 9.0.25, 9.0.26, 9.0.27, 9.0.28, 9.0.29, 9.0.31, 9.0.32, 9.0.33, 9.0.34, 9.0.35, 9.0.36, 9.0.37, 9.0.38, 9.0.39, 9.0.41, 9.0.42, 9.0.43, 9.0.44, 9.0.45, 9.0.46, 9.0.47, 9.0.48, 9.0.49, 9.0.51, 9.0.52, 9.0.53, 9.0.54, 9.0.55, 9.0.56, 9.0.57, 9.0.58, 9.0.59, 9.0.61, 9.0.62, 9.0.63, 9.0.64, 9.0.65, 9.0.66, 9.0.67, 9.0.68, 9.0.69, 9.0.71, 9.0.72, 9.0.73, 9.0.74, 9.0.75, 9.0.76, 9.0.77, 9.0.78, 9.0.79, 9.0.81, 9.0.82, 9.0.83, 9.0.84, 9.0.85, 10.0, 10.0.0-M1, 10.0.0-M4, 10.0.0-M5, 10.0.0-M6, 10.0.0-M7, 10.0.0-M9, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.0.11, 10.0.12, 10.0.13, 10.0.14, 10.0.15, 10.0.16, 10.0.17, 10.0.18, 10.0.19, 10.0.21, 10.0.22, 10.0.23, 10.0.24, 10.0.25, 10.0.26, 10.1, 10.1.0-M5, 10.1.0-M8, 10.1.0-M12, 10.1.0-M14, 10.1.0-M16, 10.1.1, 10.1.2, 10.1.3, 10.1.4, 10.1.5, 10.1.6, 10.1.7, 10.1.8, 10.1.9, 10.1.11, 10.1.12, 10.1.13, 10.1.14, 10.1.15, 10.1.16, 10.1.17, 10.1.18, 11.0.0-M1, 11.0.0-M2, 11.0.0-M5, 11.0.0-M11, 11.0.0-M16

Link to Product Website: https://www.apache.org/

Typ oprogramowania: Application Server Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-03-227.87.5Apache Tomcat Local Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.14CVE-2024-22029
2024-03-135.35.1Apache Tomcat Websocket denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23672
2024-03-135.35.1Apache Tomcat HTTP/2 Request denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2024-24549
2024-01-194.84.7Apache Tomcat Incomplete POST Request information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21733
2023-11-286.46.3Apache Tomcat HTTP Trailer Header privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2023-46589
2023-10-105.35.2Apache Tomcat privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-45648
2023-10-105.55.4Apache Tomcat Commons FileUpload denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-42794
2023-10-105.35.2Apache Tomcat Recycling information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2023-42795
2023-09-144.24.2Apache Tomcat JSS denial of service$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2022-4132
2023-09-136.56.4Apache Tomcat mod_jk privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2023-41081
2023-08-264.34.3Apache Tomcat FORM Authentication Redirect$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41080
2023-06-215.55.4Apache Tomcat Response Header information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-34981
2023-05-226.46.4Apache Tomcat Incomplete Fix CVE-2023-2499 memory corruption$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2023-28709
2023-03-224.03.9Apache Tomcat RemoteIpFilter information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-28708
2023-01-036.56.4Apache Tomcat JsonErrorReportValve privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-45143
2022-11-017.47.2Apache Tomcat Header privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-42252
2022-09-283.13.1Apache Tomcat Client Connection race condition$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-43980
2022-06-233.53.4Apache Tomcat Form Authentication Example cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-34305
2022-05-134.34.1Apache Tomcat WebSocket Message denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-25762
2022-05-125.35.2Apache Tomcat EncryptInterceptor denial of service$5k-$25k$0-$5kNot DefinedWorkaround0.02CVE-2022-29885
2022-01-274.54.3Apache Tomcat Fix CVE-2020-9484 race condition$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-23181
2021-10-154.34.1Apache Tomcat HTTP Upgrade OutOfMemoryError denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-42340
2021-09-165.35.3Apache Tomcat TLS Packet denial of service$5k-$25k$0-$5kNot DefinedNot Defined0.03CVE-2021-41079
2021-07-125.55.5Apache Tomcat JNDI Realm weak authentication$5k-$25k$0-$5kNot DefinedNot Defined0.02CVE-2021-30640
2021-07-124.34.3Apache Tomcat Error O denial of service$5k-$25k$0-$5kNot DefinedNot Defined0.00CVE-2021-30639

203 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Apache

Do you need the next level of professionalism?

Upgrade your account now!