Tomcat@8.5.15 Security Vulnerabilities and Issues — Tomcat@8.5.15 CVE List

Lucene search

ApacheTomcat8.5.15

3 matches found

CVE•added 2020/10/12 2:15 p.m.•652 views

CVE-2020-13943

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could cont...

4.3CVSS4.7AI score0.12123EPSS

CVE•added 2017/08/11 2:29 a.m.•307 views

CVE-2017-7674

The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.

4.3CVSS5.8AI score0.04091EPSS

CVE•added 2017/08/11 2:29 a.m.•153 views

CVE-2017-7675

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

7.5CVSS7.3AI score0.03809EPSS