EUVD-2022-3142

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Apache Tomcat versions prior to 6.0.39, 7.0.50, and 8.0.0-RC10 have an XML External Entity vulnerability.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: Apache Tomcat and FileUpload Vulnerabilities in IBM UrbanCode Release (CVE-2014-0050, CVE-2013-4286, CVE-2014-0033, CVE-2013-4322, CVE-2013-4590)	17 Jun 201822:31	–	ibm
IBM Security Bulletins	Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries	26 Mar 202503:33	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat security vulnerability issues on IBM Storwize V7000 Unified system (CVE-2013-4286, CVE-2014-0033, CVE-2013-4322, CVE-2013-4590)	18 Jun 201800:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerablity (CVE-2013-4286, CVE-2013-4322, CVE-2013-4590)	17 Jun 201804:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access	1 May 202008:48	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Lifecycle Adapter for HP ALM Apache Tomcat fix (CVE-2013-4286, CVE-2014-0033, CVE-2013-4322, CVE-2013-4590, CVE-2014-0075, CVE-2014-0095, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)	17 Jun 201804:55	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator	6 Oct 202114:56	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat for WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4(CVE-2013-4286,CVE-2012-3544,CVE-2013-4322,CVE-2013-4590,CVE-2014-0033)	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat and FileUpload Vulnerabilities in IBM UrbanCode Deploy (CVE-2014-0050, CVE-2013-4286, CVE-2014-0033, CVE-2013-4322, CVE-2013-4590)	17 Jun 201822:31	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "750ec2c1-46ca-3f26-b4b2-16571dd54bb7",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4a77f095-807b-3147-9f8c-9ba381164ac7",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-4590
github	www.github.com/apache/tomcat/commit/05c84ff8304a69a30b251f207a7b93c2c882564d
github	www.github.com/apache/tomcat/commit/78dd7e6f3d8481bc3bcd71ca5b20296de1283888
github	www.github.com/apache/tomcat/commit/b9e06ead01984483af73f48e7861bc7897f5e84f
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/apache/tomcat
h20564	www.h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E

03 Oct 2025 20:07Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

EPSS0.00922