Lucene search

China National Vulnerability DatabaseCNVD-2024-13569

HistoryMar 15, 2024 - 12:00 a.m.

Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)

2024-03-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache

tomcat

denial of service

vulnerability

cnvd-2024-13569

web application

servlet

jsp

resource consumption

attack

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

7.2%

JSON

Apache Tomcat is the United States Apache (Apache) Foundation of a lightweight Web application server. The program implements the Servlet and JavaServer Page (JSP) support. Apache Tomcat has a denial of service vulnerability that can be exploited by an attacker to increase resource consumption and cause a denial of service.

CPENameOperatorVersion
apache tomcat >=10.1.0-m1，le10.1.18
apache tomcat >=9.0.0-m1，le9.0.85
apache tomcat >=8.5.0，le8.5.98

Name	Operator	Version
apache tomcat >=10.1.0-m1，	le	10.1.18
apache tomcat >=9.0.0-m1，	le	9.0.85
apache tomcat >=8.5.0，	le	8.5.98