Apache Tomcat Incomplete Cleanup vulnerability

🗓️ 10 Oct 2023 18:31:35Reported by GitHub Advisory DatabaseType

Apache Tomcat Incomplete Cleanup vulnerability fix availabl

Reporter	Title	Published	Views	Family All 213
GithubExploit	Exploit for CVE-2020-1938	29 Nov 202508:31	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0 addresses multiple vulnerabilities.	4 Jan 202407:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is susceptible to multiple Apache Tomcat vulnerabilities (CVE-2023-42794, CVE-2023-42795, CVE-2023-44487)	13 Dec 202321:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.	14 Nov 202311:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.5 fixes multiple security vulnerabilities	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: Datapower Operations Dashboard Multiple Vulnerabilities in Apache Tomcat	7 Feb 202416:12	–	ibm

Vulners

Node

org.apache.tomcat tomcat-coyoteRange11.0.0-M1–11.0.0-M12maven

org.apache.tomcat tomcatRange8.5.0–8.5.94maven

org.apache.tomcat tomcatRange9.0.0-M1–9.0.81maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42795
lists	www.lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw
openwall	www.openwall.com/lists/oss-security/2023/10/10/9
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00020.html
debian	www.debian.org/security/2023/dsa-5521
debian	www.debian.org/security/2023/dsa-5522
github	www.github.com/apache/tomcat/commit/30f8063d7a9b4c43ae4722f5e382a76af1d7a6bf
github	www.github.com/apache/tomcat/commit/44d05d75d696ca10ce251e4e370511e38f20ae75
github	www.github.com/apache/tomcat/commit/9375d67106f8df9eb9d7b360b2bef052fe67d3d4
github	www.github.com/apache/tomcat/commit/d6db22e411307c97ddf78315c15d5889356eca38

08 Aug 2025 18:28Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.3

EPSS0.00692

SSVC