The vulnerability of the CORS filter in Apache Tomcat servers allows a hacker to infect both clients and servers under certain circumstances.

🗓️ 13 Sep 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Tomcat CORS filter flaw lets remote attackers exploit data validation to infect clients and servers.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2017-7674, CVE-2017-7675)	15 Nov 201822:00	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2017-7674)	17 Jun 201805:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is affected by an Apache Tomcat related vulnerability (CVE-2017-7674)	23 Mar 202020:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM Storwize V7000 Unified (CVE-2017-7674, CVE-2017-7675)	18 Jun 201800:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2017-7674)	17 Jun 201805:23	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Build Forge Security Advisory for Apache HTTPD, Apache Tomcat and OpenSSL Upgrade	17 Jun 201805:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-7674)	17 Jun 201805:26	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat Vulnerabilities affect Algo One - Counterparty Credit Risk	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Algo One - Algo Risk Application (CVE-2017-7674, CVE-2017-7675)	15 Jun 201823:48	–	ibm

Vulners

Node

apache tomcatRange7.0.41–7.0.78

apache tomcatRange8.0.0.rc1–8.0.44

apache tomcatRange8.5.0–8.5.15

apache tomcatRange9.0.0.m1–9.0.0.m21

Source	Link
securityfocus	www.securityfocus.com/bid/100280
lists	www.lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f%3Cannounce.tomcat.apache.org%3E
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

EPSS0.06837