PT-2022-2876

🗓️ 28 Apr 2022 00:00:00Reported by Positive TechnologiesType

Vulnerable Apache Tomcat versions may lead to denial of service due to EncryptInterceptor misconfiguration.

Reporter	Title	Published	Views	Family All 431
zdt	Apache Tomcat 10.1 - Denial Of Service Exploit	5 Apr 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat, Apache Commons FileUpload and Apache Axis might affect IBM Storage Copy Data Management	22 Mar 202416:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to Incomplete Cleanup and Improper Encoding or Escaping of Output due to Apache Tomcat (CVE-2025-31650 & CVE-2025-31651)	21 May 202505:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in tomcat affects IBM Netezza Appliance	3 Jun 202610:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is vulnerable to denial of service due to use of Apache Tomcat (CVE-2022-29885).	18 Jul 202215:30	–	ibm
IBM Security Bulletins	Security Bulletin: due to the use of Apache Tomcat, IBM webMethods developer portal is affected by Multiple Vulnerabilities	30 Sep 202510:47	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Apache Tomcat, IBM ApplinX is vulnerable to an Improper Encoding or Escaping of Output vulnerability (CVE-2025-31651) and an Improper Input Validation vulnerability (CVE-2025-31651).	16 May 202508:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerability in Apache Tomcat	7 Nov 202407:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat and form-data might affect IBM Storage Defender Copy Data Management.	26 Sep 202518:32	–	ibm

Source	Link
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6
osv	www.osv.dev/vulnerability/CLEANSTART-2026-AJ47488
ubuntu	www.ubuntu.com/security/CVE-2021-41079
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XP58111.json
osv	www.osv.dev/vulnerability/CVE-2026-24515
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-28708
osv	www.osv.dev/vulnerability/CLEANSTART-2026-RK94800
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-24515
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-31650
github	www.github.com/apache/tomcat/commit/0fa7721f11d565a2cd2e44366c388ad6a3e6357d

18 Sep 2026 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25 - 7.8

CVSS 3.19.8

EPSS0.73474

SSVC