AZL-61866 CVE-2025-47287 affecting package python-tornado 6.3.3-11

🗓️ 15 May 2025 22:15:18Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Tornado versions prior to 6.50 log errors from multipart form data and can cause a denial of service; upgrade to 6.50.

Reporter	Title	Published	Views	Family All 209
IBM Security Bulletins	Security Bulletin: Tornado multipart/form-data Parser Vulnerability Enables Log-Based DoS Attack (Pre-6.5.0), which affects IBM watsonx.data	1 Sep 202514:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data Are Addressed	28 Aug 202509:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to tornado-6.4.2-cp38-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl CVE-2025-47287	1 Sep 202513:06	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-tornado (ALAS2023-2025-1002)	12 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-tornado (ALAS-2025-2888)	12 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python3-tornado (ALAS-2025-2889)	12 Jun 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : python-tornado (ALSA-2025:8136)	27 May 202500:00	–	nessus
Tenable Nessus	Debian dla-4188 : python-tornado-doc - security update	29 May 202500:00	–	nessus
Tenable Nessus	Debian dsa-5938 : python-tornado-doc - security update	6 Jun 202500:00	–	nessus
Tenable Nessus	MiracleLinux 9 : python-tornado-6.4.2-2.el9_6.2 (AXSA:2025-10491:02)	13 Jan 202600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47287

21 Apr 2026 04:31Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00636

SSVC