KLA11472 ACE vulnerability in Apache Tomcat

🗓️ 13 Apr 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 255 Views

Multiple vulnerabilities found in Apache Tomcat, allowing arbitrary code execution and cross-site scripting attacks. Public exploits and malware exist for these vulnerabilities. Refer to original advisories for more details

Reporter	Title	Published	Views	Family All 213
0day.today	Apache Tomcat CGIServlet enableCmdLineArguments Remote Code Execution Exploit	2 Jul 201900:00	–	zdt
0day.today	Apache Tomcat 9.0.0.M1 - Cross-Site Scripting (XSS) Vulnerability	13 Jul 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	10 Jan 202007:16	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2019-0232, CVE-2019-0221)	13 Jan 202012:45	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to Using Components with Known Vulnerabilities	19 Apr 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0232)	29 Apr 201919:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Apache Tomcat affects multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0221)	19 Jun 201919:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Apache Tomcat affects multiple IBM Rational products based on IBM's Jazz technology	28 Apr 202118:35	–	ibm

Source	Link
tomcat	www.tomcat.apache.org/security-8.html
tomcat	www.tomcat.apache.org/security-7.html
tomcat	www.tomcat.apache.org/security-9.html
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Apache-Tomcat/
statistics	www.statistics.securelist.com/

02 Feb 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

CVSS 38.1

EPSS0.94221