CVE-2022-45143

🗓️ 03 Jan 2023 19:15:00Reported by ubuntu.comType

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was possible for users to supply values that invalidated or manipulated the JSON output

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . Multiple CVEs	27 Jun 202311:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	7 Mar 202303:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating Apache Tomcat Server	31 Oct 202315:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2022-45143	20 Jan 202316:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Build is affected by CVE-2022-45143	25 Jan 202311:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by JsonErrorReportValve in Apache Tomcat.	1 Feb 202305:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Process Mining . CVE-2022-45143	5 May 202314:27	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	22.04	any	tomcat9	0	tomcat9_0_any.deb

Source	Link
github	www.github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e%20(9.0.69)
github	www.github.com/apache/tomcat/commit/0cab3a56bd89f70e7481bb0d68395dc7e130dbbf%20(8.5.84)
openwall	www.openwall.com/lists/oss-security/2023/01/03/1
lists	www.lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj
cve	www.cve.org/CVERecord

19 Mar 2026 16:20Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.02505

SSVC