Apache Tomcat vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
12 matching records
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatch nowKEVEPSS 98.50%Apr 9, 2026
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityPatch nowKEVEPSS 99.94%Mar 10, 2025
- Critical9.8Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Dec 20, 2024
- Unknownpascom cloud_phone_system Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.80%Jan 22, 2024
- UnknownApache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 90.65%Dec 19, 2023
- UnknownApache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.71%Nov 9, 2023
- Critical9.8SysAid Server Path Traversal VulnerabilityPatch nowKEVEPSS 98.85%Nov 8, 2023
- UnknownApache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 99.92%Apr 12, 2021
- Critical9.8Apache Tomcat Improper Privilege Management VulnerabilityPatch nowKEVEPSS 99.27%Feb 24, 2020
- High8.1Apache Tomcat Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Oct 3, 2017
- High8.1Apache Tomcat on Windows Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.71%Sep 19, 2017
- Critical9.8Apache Tomcat Remote Code Execution VulnerabilityPatch nowKEVEPSS 90.34%Apr 6, 2017
Sort
12 records