EUVD-2022-5013

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Apache Tomcat versions before 6.0.40, 7.0.53, and 8.0.4 allow XXE vulnerabilities for file access.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat vulnerabilities in QRadar (CVE-2014-0075, CVE-2014-0095, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)	16 Jun 201821:19	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Common Reporting iFixes for multiple Security Vulnerabilities (CVE-2014-3566,CVE-2014-6145,CVE-2014-1568,CVE-2014-4263,CVE-2014-3513,CVE-2014-3567,CVE-2014-3568,CVE-2014-0107,CVE-2014-0075,CVE-2014-0096,CVE-2014-0099,CVE-2014-011	17 Jun 201814:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat for WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4（CVE-2014-0075, CVE-2014-0096 and CVE-2014-0119）	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries	26 Mar 202503:33	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Insight - Open Source Tomcat reported in May 2014 X-Force Report	17 Jun 201804:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Cognos BI Server is affected by the following vulnerabilities: CVE-2014-0107, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119, CVE-2014-0878, CVE-2014-0460	15 Jun 201823:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access	1 May 202008:48	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Directory Server and Rational Directory Administrator can be affected by vulnerabilities (CVE-2014-4263, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099 and CVE-2014-0119)	17 Jun 201804:57	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat Vulnerabilities in IBM UrbanCode Release (CVE-2014-0075,CVE-2014-0095,CVE-2014-0096,CVE-2014-0099,CVE-2014-0119)	17 Jun 201822:31	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "0b82ae87-1bb5-34b5-97cd-24ad2d8551a0",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "75a66e85-3931-30dc-8f16-9332d6f3d47b",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-0096
github	www.github.com/apache/tomcat/commit/3c53c4da7bcf300f519eaed5ad1751d24dd59f6b
github	www.github.com/apache/tomcat/commit/5c545da226b3c71ed9603c38ad2de88057778c1b
github	www.github.com/apache/tomcat/commit/913d94b289e056107e521dbab8e79cc72a62a331
github	www.github.com/apache/tomcat/commit/970c23bfd24dfa1dcb86ed917e6c8b47dcfb4433
github	www.github.com/apache/tomcat80/commit/65ed69d96a101dfa99eea2cfe17e9e87b310084c
github	www.github.com/apache/tomcat80/commit/f3f2979df693a9c84c6742fcb162f3671b0a50d3
github	www.github.com/apache/tomcat
h20564	www.h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
lists	www.lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E

03 Oct 2025 20:07Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.3

EPSS0.05795