High
Exploited in attacks
CVE-2017-12617
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 213
Reset filters
High
CVE-2017-7675
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
High
CVE-2022-25762
Improper socket reuse in Apache Tomcat
High
CVE-2017-5664
Improper Handling of Exceptional Conditions in Apache Tomcat
Critical
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
High
CVE-2017-5650
Improper Resource Shutdown or Release in Apache Tomcat
Critical
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
High
CVE-2016-5388
Improper Access Control in Apache Tomcat
High
CVE-2016-6816
Improper Input Validation in Apache Tomcat
Critical
Exploited in attacks
CVE-2016-8735
Apache Tomcat Improper Access Control vulnerability
Medium
CVE-2013-4444
Apache Tomcat Unrestricted file upload vulnerability
Medium
CVE-2016-6794
System Property Disclosure in Apache Tomcat
High
CVE-2016-6796
Apache Tomcat vulnerable to SecurityManager bypass
Critical
CVE-2016-5018
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
High
CVE-2016-6797
Incorrect Authorization in Apache Tomcat
Medium
CVE-2016-0762
Observable Discrepancy in Apache Tomcat
High
CVE-2022-29885
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption
Medium
CVE-2012-0022
Denial of Service in Apache Tomcat
Medium
CVE-2011-0013
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Medium
CVE-2010-1157
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Critical
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
Medium
CVE-2009-2902
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
Medium
CVE-2009-2901
Improper Authentication in Apache Tomcat
Medium
CVE-2009-2693
Apache Tomcat Directory Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.