Lucene search
K

CVE-2024-24549

🗓️ 13 Mar 2024 15:46:53Reported by apacheType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 460 Views

Denial of Service vulnerability in Apache Tomcat due to improper input validation for HTTP/2 requests. Upgrading to fixed versions recommended

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001
14 May 202420:42
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-24549) affects Power HMC
16 Apr 202416:53
ibm
IBM Security Bulletins
Security Bulletin: Apache Tomcat is vulnerable to CVE-2024-24549 and CVE-2024-23672 used in IBM Maximo Application Suite - Monitor Component
2 May 202419:25
ibm
IBM Security Bulletins
Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.
27 Mar 202417:25
ibm
IBM Security Bulletins
Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.
27 Mar 202417:19
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by denial of service vulnerabilities (CVE-2024-24549, CVE-2024-23672, CVE-2024-0727, CVE-2023-6129)
29 Aug 202415:33
ibm
IBM Security Bulletins
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-24549, CVE-2024-23672)
5 Apr 202411:18
ibm
IBM Security Bulletins
Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10
29 Jul 202522:30
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat
24 Jul 202422:40
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
19 Jun 202415:29
ibm
Rows per page
NVD
Vulners
Node
apachetomcatRange8.5.08.5.99
OR
apachetomcatRange9.0.09.0.86
OR
apachetomcatRange10.1.010.1.19
OR
apachetomcatMatch11.0.0milestone1
OR
apachetomcatMatch11.0.0milestone10
OR
apachetomcatMatch11.0.0milestone11
OR
apachetomcatMatch11.0.0milestone12
OR
apachetomcatMatch11.0.0milestone13
OR
apachetomcatMatch11.0.0milestone14
OR
apachetomcatMatch11.0.0milestone15
OR
apachetomcatMatch11.0.0milestone16
OR
apachetomcatMatch11.0.0milestone2
OR
apachetomcatMatch11.0.0milestone3
OR
apachetomcatMatch11.0.0milestone4
OR
apachetomcatMatch11.0.0milestone5
OR
apachetomcatMatch11.0.0milestone6
OR
apachetomcatMatch11.0.0milestone7
OR
apachetomcatMatch11.0.0milestone8
OR
apachetomcatMatch11.0.0milestone9
Node
[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.0-M16",
        "status": "affected",
        "version": "11.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.1.18",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.85",
        "status": "affected",
        "version": "9.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.5.98",
        "status": "affected",
        "version": "8.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.0.27",
        "status": "unknown",
        "version": "10.0.0-M1",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Oct 2025 12:15Current
7.4High risk
Vulners AI Score7.4
CVSS 3.17.5
EPSS0.6439
SSVC
460