KLA10070 RLF vulnerability in Apache Tomcat

🗓️ 31 May 2014 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 48 Views

Improper class construction vulnerability in Apache Tomcat allows reading arbitrary file

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat vulnerabilities in QRadar (CVE-2014-0075, CVE-2014-0095, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)	16 Jun 201821:19	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Common Reporting iFixes for multiple Security Vulnerabilities (CVE-2014-3566,CVE-2014-6145,CVE-2014-1568,CVE-2014-4263,CVE-2014-3513,CVE-2014-3567,CVE-2014-3568,CVE-2014-0107,CVE-2014-0075,CVE-2014-0096,CVE-2014-0099,CVE-2014-011	17 Jun 201814:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat for WebSphere Application Server Community Edition 2.1.1.6 and 3.0.0.4（CVE-2014-0075, CVE-2014-0096 and CVE-2014-0119）	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: TADDM affected by multiple vulnerabilities due to Apache Tomcat libraries	26 Mar 202503:33	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Insight - Open Source Tomcat reported in May 2014 X-Force Report	17 Jun 201804:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	16 Jun 202221:33	–	ibm
IBM Security Bulletins	Security Bulletin: Cognos BI Server is affected by the following vulnerabilities: CVE-2014-0107, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119, CVE-2014-0878, CVE-2014-0460	15 Jun 201823:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Tomcat in Rational DOORS Web Access	1 May 202008:48	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Directory Server and Rational Directory Administrator can be affected by vulnerabilities (CVE-2014-4263, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099 and CVE-2014-0119)	17 Jun 201804:57	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat Vulnerabilities in IBM UrbanCode Release (CVE-2014-0075,CVE-2014-0095,CVE-2014-0096,CVE-2014-0099,CVE-2014-0119)	17 Jun 201822:31	–	ibm

Source	Link
tomcat	www.tomcat.apache.org/security-7.html
threats	www.threats.kaspersky.com/en/product/Apache-Tomcat/
statistics	www.statistics.securelist.com/

03 Apr 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.3

EPSS0.04351

apache tomcat improper class construction reading local files xml parser network exploitation cve-2014-0119 security advisory