The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.

🗓️ 04 Apr 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Apache Tomcat vulnerability from insufficient input validation can cause service failures via requests.

Reporter	Title	Published	Views	Family All 224
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-24549) affects Power HMC	16 Apr 202416:53	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat is vulnerable to CVE-2024-24549 and CVE-2024-23672 used in IBM Maximo Application Suite - Monitor Component	2 May 202419:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by denial of service vulnerabilities (CVE-2024-24549, CVE-2024-23672, CVE-2024-0727, CVE-2023-6129)	29 Aug 202415:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-24549, CVE-2024-23672)	5 Apr 202411:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10	29 Jul 202522:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat	24 Jul 202422:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products	19 Jun 202415:29	–	ibm

Vulners

Node

apache tomcatRange11.0.0-m1–11.0.0-m17

apache tomcatRange10.1.0-m1–10.1.19

apache tomcatRange9.0.0-m1–9.0.86

apache tomcatRange8.5.0–8.5.99

red_hat jboss_web_serverMatch5.7.8

red_hat jboss_web_serverMatch6.0.1

axiom_jdk libercat_certifiedRange<9.0.88-2

axiom_jdk libercat_certifiedRange<10.1.20-2

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

novell suse_linux_enterprise_serverMatch15

red_hat red_hat_enterprise_linuxMatch9

Source	Link
lists	www.lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg
suse	www.suse.com/security/cve/CVE-2024-24549.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-24549
access	www.access.redhat.com/security/cve/CVE-2024-24549
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024031386
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.11/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2944
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

30 Sep 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 27.8

EPSS0.23072