Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security…EPSS 18.4%Feb 25, 2016
- Medium4.3Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to…EPSS 12.6%Feb 25, 2016
- Medium5.0The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of…EPSS 13.9%Jun 7, 2015
- High7.8Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of a…EPSS 20.2%Jun 7, 2015
- High7.5Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (…EPSS 12.8%Mar 9, 2015
- Medium6.4java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle atte…EPSS 21.0%Feb 16, 2015
- Medium4.3Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT styles…EPSS 7.6%May 31, 2014
- Medium4.3Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse…EPSS 8.8%May 31, 2014
- Medium4.3java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly…EPSS 6.9%May 31, 2014
- Medium5.0Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, a…EPSS 20.1%May 31, 2014
- High7.5Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils throu…EPSS 99.0%Apr 30, 2014
- Critical9.8Apache Struts Improper Input Validation VulnerabilityKEVEPSS 100.0%Jul 19, 2013
- Critical9.8Apache Struts 2 Improper Input Validation VulnerabilityKEVEPSS 75.6%Jan 8, 2012
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityKEVEPSS 54.6%Mar 30, 2006
89 records · page 4 of 4
PreviousNext