CVE-2022-45143

🗓️ 03 Jan 2023 18:12:28Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 385 Views

Apache Tomcat JSON output manipulation CVE-2022-4514

Reporter	Title	Published	Views	Family All 150
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . Multiple CVEs	27 Jun 202311:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	7 Mar 202303:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating Apache Tomcat Server	31 Oct 202315:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2022-45143	20 Jan 202316:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is affected by CVE-2022-45143	25 Jan 202311:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by JsonErrorReportValve in Apache Tomcat.	1 Feb 202305:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . CVE-2022-45143	5 May 202314:27	–	ibm

NVD

Vulners

Node

apache tomcatRange9.0.40–9.0.69

apache tomcatMatch8.5.83

apache tomcatMatch10.1.0milestone1

apache tomcatMatch10.1.0milestone10

apache tomcatMatch10.1.0milestone11

apache tomcatMatch10.1.0milestone12

apache tomcatMatch10.1.0milestone13

apache tomcatMatch10.1.0milestone14

apache tomcatMatch10.1.0milestone15

apache tomcatMatch10.1.0milestone16

apache tomcatMatch10.1.0milestone17

apache tomcatMatch10.1.0milestone2

apache tomcatMatch10.1.0milestone3

apache tomcatMatch10.1.0milestone4

apache tomcatMatch10.1.0milestone5

apache tomcatMatch10.1.0milestone6

apache tomcatMatch10.1.0milestone7

apache tomcatMatch10.1.0milestone8

apache tomcatMatch10.1.0milestone9

apache tomcatMatch10.1.1

[
  {
    "defaultStatus": "affected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "10.1.1",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.68",
        "status": "affected",
        "version": "9.0.40",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.5.83"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202305-37
lists	www.lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj
security	www.security.netapp.com/advisory/ntap-20230216-0009/

21 Nov 2024 07:28Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00889

SSVC

CWE-116