Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Apache Tomcat — Vulnerabilities & Security Advisories 142

All 142 CVE vulnerabilities found in Apache Tomcat, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Apache Tomcat, a Java web server and servlet container developed by the Apache Software Foundation. It collects security advisories and known weaknesses associated with this product, covering disclosures spanning its release history. Readers can use this resource to track vendor-issued security notices, analyze specific weakness classes affecting Tomcat, and review the product's historical vulnerability profile to assess risk trends over time.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2022-29885 EncryptInterceptor does not provide complete protection on insecure networks CWE-400 7.5 - 2022-05-12
CVE-2022-23181 Local privilege escalation with FileStore CWE-367 7.0 - 2022-01-27
CVE-2021-42340 DoS via memory leak with WebSocket connections CWE-772 7.5 - 2021-10-14
CVE-2021-41079 Apache Tomcat DoS with unexpected TLS packet CWE-20 7.5 - 2021-09-16
CVE-2021-33037 Incorrect Transfer-Encoding handling with HTTP/1.0 CWE-444 5.3 - 2021-07-12
CVE-2021-30640 Auth weakness in JNDIRealm 6.5 - 2021-07-12
CVE-2021-30639 DoS after non-blocking IO error 6.5 - 2021-07-12
CVE-2021-25122 Apache Tomcat h2c request mix-up CWE-200 7.5 - 2021-03-01
CVE-2021-25329 Incomplete fix for CVE-2020-9484 7.4 - 2021-03-01
CVE-2021-24122 Apache Tomcat information disclosure CWE-200 5.9 - 2021-01-14
CVE-2020-17527 Apache Tomcat: Request header mix-up between HTTP/2 streams CWE-200 7.5 - 2020-12-03
CVE-2020-13943 Apache Tomcat 安全漏洞 5.3 - 2020-10-12
CVE-2020-13935 Apache Tomcat 安全漏洞 7.5 - 2020-07-14
CVE-2020-13934 Apache Tomcat 缓冲区错误漏洞 7.5 - 2020-07-14
CVE-2020-11996 Apache Tomcat 资源管理错误漏洞 7.5 - 2020-06-26
CVE-2020-9484 Apache Tomcat 代码问题漏洞 7.4 - 2020-05-20
CVE-2020-1938 Apache Tomcat 安全漏洞 9.8 - 2020-02-24
CVE-2020-1935 Apache Tomcat 环境问题漏洞 4.8 - 2020-02-24
CVE-2019-17569 Apache Tomcat 环境问题漏洞 4.8 - 2020-02-24
CVE-2019-12418 Apache Tomcat 安全漏洞 7.0 - 2019-12-23
CVE-2019-17563 Apache Tomcat 授权问题漏洞 7.5 - 2019-12-23
CVE-2019-10072 Apache Tomcat 资源管理错误漏洞 7.5 - 2019-06-21
CVE-2019-0221 Apache Tomcat 跨站脚本漏洞 6.1 - 2019-05-28
CVE-2019-0199 Apache Tomcat 资源管理错误漏洞 7.5 - 2019-04-10
CVE-2018-11784 Apache Tomcat 输入验证错误漏洞 4.3 - 2018-10-04
CVE-2018-1336 Apache Tomcat 资源管理错误漏洞 7.5 - 2018-08-02
CVE-2018-8037 Apache Tomcat 竞争条件问题漏洞 5.9 - 2018-08-02
CVE-2018-8034 Apache Tomcat 信任管理问题漏洞 9.1 - 2018-08-01
CVE-2018-8014 Apache Tomcat CORS Filter 安全特征问题漏洞 9.8 - 2018-05-16
CVE-2018-1304 Apache Tomcat 安全特征问题漏洞 8.2 - 2018-02-28

All 142 known CVE vulnerabilities affecting Apache Tomcat with full Chinese analysis, references, and POCs where available.