Lucene search
K

EUVD-2022-5668

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Apache Tomcat versions flawed in processing passwords, risking timing attacks on user names.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM Cognos Business Intelligence Server 2017Q1 Security Updater : IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities.
15 Jun 201823:17
ibm
IBM Security Bulletins
Security Bulletin: Apache Tomcat as used in IBM QRadar SIEM is vulnerable to various CVE's
16 Jun 201821:50
ibm
IBM Security Bulletins
Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities
16 Jun 202221:33
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities in Apache Tomcat affect multiple IBM Rational products based on IBM's Jazz technology
28 Apr 202118:35
ibm
IBM Security Bulletins
Security Bulletin: Multiple Apache Tomcat vulnerabilities affect IBM SONAS.
18 Jun 201800:32
ibm
IBM Security Bulletins
Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM)
17 Jun 201815:39
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Apache Tomcat affect Power Hardware Management Console (CVE-2016-6816, CVE-2016-6817, and CVE-2016-0762)
23 Sep 202101:31
ibm
IBM Security Bulletins
Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.
15 Jun 201823:48
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect IBM Cognos Metrics Manager (CVE-2016-0762, CVE-2016-6816)
15 Jun 201823:17
ibm
IBM Security Bulletins
Security Bulletin: Apache Log4j Vulnerabilities Affect IBM Sterling B2B Integrator
6 Oct 202114:56
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "489a35eb-2e87-3e6f-a6af-3eb52dd48bb7",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "119a0572-d81a-3594-8282-d816c283fb5c",
        "product": {
          "name": "Apache Tomcat"
        },
        "product_version": "9.0.0.M1 to 9.0.0.M9"
      },
      {
        "id": "56193c95-45f2-3f7a-be2a-d05ef1fac9f8",
        "product": {
          "name": "Apache Tomcat"
        },
        "product_version": "7.0.0 to 7.0.70"
      },
      {
        "id": "b66919d7-d6df-3ebe-bbd4-4b76def6c47c",
        "product": {
          "name": "Apache Tomcat"
        },
        "product_version": "8.0.0.RC1 to 8.0.36"
      },
      {
        "id": "da845ab9-73bc-3b2f-b5b7-330465acecb8",
        "product": {
          "name": "Apache Tomcat"
        },
        "product_version": "6.0.0 to 6.0.45"
      },
      {
        "id": "fe63097c-7bb3-3efa-b7b1-18c1c42a2776",
        "product": {
          "name": "Apache Tomcat"
        },
        "product_version": "8.5.0 to 8.5.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.9
CVSS 24.3
EPSS0.00503
2