EUVD-2022-2350

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Apache Tomcat versions flaw allows bypassing SecurityManager via incorrect privileges in Expression Language

Reporter	Title	Published	Views	Family All 167
IBM Security Bulletins	Security Bulletin: WAS traditional and liberty vulnerable to CVE-2014-7810	16 Jan 201909:05	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat as used in IBM QRadar SIEM is vulnerable to a security bypass. (CVE-2014-7810)	16 Jun 201821:31	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2014-7810)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1770), (CVE-2018-7810), (CVE-2018-1793), (CVE-2018-1794), (CVE-2018-1777)	21 Oct 201819:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Impact (CVE-2014-7810)	30 Jan 201910:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2018-3169, CVE-2014-7810, CVE-2018-1767)	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MessageSight is affected by an IBM WebSphere Liberty expression language vulnerability	20 Jan 201919:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2014-0230, CVE-2014-7810,CVE-2014-0227)	15 Jun 201807:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Privileged Identity Manager	19 Sep 201900:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus & IBM App Connect Enterprise are affected by a Websphere Application Server Vulnerability (CVE-2014-7810)	23 Mar 202020:41	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "cd75aabf-6992-3df8-ad58-297256411346",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "69e63d7f-0271-3186-9b98-c9736f155cc8",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-7810
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
marc	www.marc.info/

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

EPSS0.09485