PT-2020-3309

🗓️ 30 Oct 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Apache Tomcat is vulnerable to remote code execution via deserialization in specific versions.

Reporter	Title	Published	Views	Family All 12170
IBM Security Bulletins	Security Bulletin: jQuery Vulnerabilities Affect IBM Emptoris Sourcing (CVE-2020-11023, CVE-2020-11022)	3 Dec 202009:54	–	ibm
IBM Security Bulletins	Security bulletin: Rational Directory Server (Tivoli) is affected by an Apache Tomcat vulnerability (CVE-2015-5174)	17 Jun 201805:12	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in HTTP/2 protocol used by Netty on IBM Maximo Asset Management application (CVE-2023-44487)	5 Apr 202415:13	–	ibm
IBM Security Bulletins	Security Bulletin: Apache commons fileupload vulnerability affect embedded Content Platform Engine in IBM Business Automation Workflow - CVE-2023-24998	20 Dec 202317:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Data Redaction is affected by Open Source Apache Tomcat, Commons FileUpload Vulnerabilities (CVE-2016-3092)	16 Jun 201821:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to Incomplete Cleanup and Improper Encoding or Escaping of Output due to Apache Tomcat (CVE-2025-31650 & CVE-2025-31651)	21 May 202505:09	–	ibm
IBM Security Bulletins	Security Bulletin: GUI DOS vulnerability in SAN Volume Controller and Storwize Family (CVE-2014-0050)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Privilege On-Premise is affected by multiple security vulnerabilities	5 Oct 202308:12	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management	28 Jun 202317:22	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/DSA-5265-1
osv	www.osv.dev/vulnerability/USN-5360-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
access	www.access.redhat.com/security/cve/CVE-2016-10735
suse	www.suse.com/security/cve/CVE-2015-5345
github	www.github.com/Abdurahmon3236/CVE-2024-24549
bugzilla	www.bugzilla.suse.com/1182912
access	www.access.redhat.com/security/cve/CVE-2024-24549
security-tracker	www.security-tracker.debian.org/tracker/DLA-2279-1
suse	www.suse.com/security/cve/CVE-2017-5648

10 Dec 2025 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17 - 9.8

CVSS 27.8

CVSS 34.7 - 9.8

EPSS0.99999

SSVC