PT-2021-3586

🗓️ 15 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Apache Tomcat versions 8.5.0 to 10.0.6 vulnerable to request smuggling via HTTP transfer encoding.

Reporter	Title	Published	Views	Family All 10291
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed (CVE-2016-3092)	26 Apr 202121:17	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Apache Tomcat, IBM ApplinX is vulnerable to multiple vulnerabilities (CVE-2025-52520, CVE-2025-53506 and CVE-2025-52434).	7 Oct 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Resource Shutdown or Release in Apache Tomcat [CVE-2025-48989]	31 Oct 202519:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in nghttp2 library (CVE-2023-44487) affects Power HMC	16 Apr 202416:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat and form-data might affect IBM Storage Defender Copy Data Management.	26 Sep 202518:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat as used by IBM QRadar SIEM is vulnerable to information disclosure (CVE-2020-13943)	4 May 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by Apache Tomcat vulnerabilities.	20 Jan 202106:14	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere denial-of-service vulnerability affects IBM Sterling Control Center (CVE-2023-24998)	13 Jul 202314:05	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by JsonErrorReportValve in Apache Tomcat.	1 Feb 202305:59	–	ibm

Source	Link
debian	www.debian.org/security/2021/dsa-4952
openwall	www.openwall.com/lists/oss-security/2021/10/14/1
security	www.security.gentoo.org/glsa/202208-34
suse	www.suse.com/security/cve/CVE-2015-5345
bdu	www.bdu.fstec.ru/vul/2021-03688
bugzilla	www.bugzilla.suse.com/1258371
t	www.t.me/cvenotify/20238
lists	www.lists.apache.org/thread.html/r40f921575aee8d7d34e53182f862c45cbb8f3d898c9d4e865c2ec262%40%3Ccommits.tomee.apache.org%3E
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
suse	www.suse.com/support/update/announcement/2021/suse-su-20213670-1

26 Mar 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3 - 10

CVSS 27.8

CVSS 39.8

EPSS0.99999

SSVC