The vulnerability of the Apache Tomcat application server arises from the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

🗓️ 30 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache Tomcat vulnerability redirects users to unreliable external URLs, enabling remote arbitrary redirection.

Reporter	Title	Published	Views	Family All 205
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager October 2023 - Multiple CVEs addressed	19 Oct 202311:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating Apache Tomcat Server	31 Oct 202315:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to phishing attacks in Apache Tomcat [CVE-2023-41080]	31 Jan 202423:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to a remote attacker due to Apache Tomcat	24 Oct 202315:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm

Vulners

Node

apache tomcatRange11.0.0-m1–11.0.0-m10

apache tomcatRange10.1.0-m1–10.1.12

apache tomcatRange9.0.0-m1–9.0.79

apache tomcatRange8.5.0–8.5.92

axiom_jdk libercat_certifiedRange<9.0.88-2

axiom_jdk libercat_certifiedRange<10.1.20-2

Source	Link
lists	www.lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
github	www.github.com/shiomiyan/CVE-2023-41080
securityonline	www.securityonline.info/cve-2023-41080-apache-tomcat-open-redirect-vulnerability/
vuldb	www.vuldb.com/ru/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.9/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2024-2418
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

22 Aug 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 34.8

CVSS 24.9

EPSS0.05972