CVE-2022-25762

🗓️ 13 May 2022 07:50:09Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 1225 Views

WebSocket message concurrency issue in Apache Tomcat causing data leakage and error

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat	7 Nov 202407:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is vulnerable to a bypass of security restrictions due to use of Apache Tomcat (CVE-2022-25762).	18 Jul 202215:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is vulnerable to a bypass of security restrictions due to use of Apache Tomcat (CVE-2022-25762).	18 Jul 202215:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
ATTACKERKB	CVE-2022-25762	13 May 202208:15	–	attackerkb
Amazon	Important: tomcat8	5 Aug 202200:00	–	amazon
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2022-1627)	5 Aug 202200:00	–	nessus

NVD

Vulners

Node

apache tomcatRange8.5.0–8.5.76

apache tomcatRange9.0.0–9.0.21

Node

oracle agile_plmMatch9.3.6

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 9 9.0.0.M1 to 9.0.20"
      },
      {
        "status": "affected",
        "version": "Apache Tomcat 8.5 8.5.0 to 8.5.75"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2022.html
security	www.security.netapp.com/advisory/ntap-20220629-0003/
lists	www.lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7c

17 Jun 2026 04:34Current

8.3High risk

Vulners AI Score8.3

CVSS 27.5

CVSS 3.18.6

EPSS0.07538

CWE-404