EUVD-2022-4624

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Session-persistence flaw in Apache Tomcat enables remote users to bypass security and execute code.

Reporter	Title	Published	Views	Family All 181
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos TM1	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller and Storwize Family	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0763, CVE-2015-5174)	17 Jun 201805:10	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat as used in IBM QRadar SIEM is susceptible to multiple vulnerabilities. (CVE-2015-5345, CVE-2016-0706, CVE-2016-0714, CVE-2015-5174)	16 Jun 201821:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects Rational Lifecycle Integration Adapter for HP ALM (CVE-2015-5345, CVE-2016-0706, CVE-2016-0714)	17 Jun 201805:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2015-5345, CVE-2016-0706, CVE-2016-0714)	18 Nov 201913:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects Rational Reporting for Development Intelligence (CVE-2015-5174)	17 Jun 201805:14	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in the versions of IBM WebSphere Application Server Community Edition bundled with WebSphere Dashboard Framework 7.0.1 (CVE-2015-5345) (CVE-2016-0706) (CVE-2016-0714)	16 Jun 201820:01	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "c8e8d291-6557-35a4-ace9-77a46f556921",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9ad18654-15c3-3c58-9859-436a023ded92",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-0714
github	www.github.com/apache/tomcat/commit/50f1b1da794cd93b70ab5456d3c2c984408e1506
github	www.github.com/apache/tomcat/commit/79e8ad03404c131009811855f9a30d8d01c0c736
github	www.github.com/apache/tomcat/commit/824eb1d1ad922e7652ecf51adb2b9eebb5bb88b5
github	www.github.com/apache/tomcat/commit/e1b1002129fea4033329f6f619ba219527bbbd40
github	www.github.com/apache/tomcat/commit/f626da75fd59da82b14dee7b8cc46ad51eefdbe5
github	www.github.com/apache/tomcat/commit/ff1b659dc366a2ad47cd8f7e3544c796a1b15e46
github	www.github.com/apache/tomcat80/commit/2e5cc28052e84ba45196949ba602484221bbf33c
github	www.github.com/apache/tomcat80/commit/5430f30c79383e4d2d87785468905fcb00bace58
lists	www.lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E

03 Oct 2025 20:07Current

8.7High risk

Vulners AI Score8.7

CVSS 38.8

CVSS 26.5

EPSS0.07095