Apache Tomcat 资源管理错误漏洞

🗓️ 10 Jul 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

Apache Tomcat resource management error enables attackers to cause resource exhaustion via unacknowledged frame.

Reporter	Title	Published	Views	Family All 231
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat( CVE-2025-53506, CVE-2025-52434 and CVE-2025-52520 )	20 Aug 202506:45	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities Addressed in Cloudera Data Platform Private Cloud Base with IBM 7.3.1	15 May 202615:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-9.0.106.jar	6 Oct 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Apache Tomcat, IBM ApplinX is vulnerable to multiple vulnerabilities (CVE-2025-52520, CVE-2025-53506 and CVE-2025-52434).	7 Oct 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption in Apache Tomcat [CVE-2025-53506]	31 Oct 202518:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities	6 Mar 202616:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	12 Aug 202509:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods BPM.	11 Nov 202513:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat Server (CVE-2025-52434, CVE-2025-48989, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-49125, CVE-2025-48988, CVE-2025-46701, CVE-2025-31651, CVE-2025-31650) affect Power HMC.	20 Nov 202506:10	–	ibm
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-1093)	4 Aug 202500:00	–	nessus

Source	Link
lists	www.lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-53506
vigilance	www.vigilance.fr/vulnerability/Apache-Tomcat-denial-of-service-via-Excessive-HTTP-2-Streams-47628
access	www.access.redhat.com/security/cve/cve-2025-53506

25 May 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.01898

SSVC

Apache Tomcat Resource management error Unacknowledged frame Resource exhaustion Hypertext Transfer Protocol