org.apache.tomcat CVEs | Waratek

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 101 matches · 15 protected · 0 exploited · 0 CISA KEV · 25 public PoC · 13 EPSS ≥ 0.5

101matches 15protected14.9% 0exploited0.0% 0CISA KEV0.0% 25public PoC24.8% 13EPSS ≥ 0.512.9%

Protected by Waratek 15 14.9% Rule in development 0 0.0% Mitigation candidate 21 20.8% No exploit published 65 64.4%

Critical 0 0.0% High 11 10.9% Medium 82 81.2% Low 8 7.9% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 15 14.9% partly blocked 0 0.0% not blocked 86 85.1% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 25 24.8% Proof of concept only 0 0.0% Forecast only 2 2.0% No public exploit 74 73.3%

split by StatusSeverityProtectionExploit maturity peak 14 / year

20001 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20012 Mitigation candidate1 No exploit published1 Medium2 not blocked2 Working exploit published1 No public exploit1 20028 Protected by Waratek1 Mitigation candidate3 No exploit published4 High2 Medium6 blocked by ARMR today1 not blocked7 Working exploit published3 No public exploit5 20037 Protected by Waratek1 Mitigation candidate2 No exploit published4 High1 Medium6 blocked by ARMR today1 not blocked6 Working exploit published3 No public exploit4 20040 20055 Mitigation candidate1 No exploit published4 High1 Medium3 Low1 not blocked5 Working exploit published1 No public exploit4 20061 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 200714 Protected by Waratek1 Mitigation candidate4 No exploit published9 High1 Medium10 Low3 blocked by ARMR today1 not blocked13 Working exploit published5 No public exploit9 20087 Protected by Waratek2 Mitigation candidate2 No exploit published3 Medium7 blocked by ARMR today2 not blocked5 Working exploit published4 No public exploit3 20096 Protected by Waratek1 Mitigation candidate1 No exploit published4 Medium5 Low1 blocked by ARMR today1 not blocked5 Working exploit published1 No public exploit5 20107 Protected by Waratek2 Mitigation candidate2 No exploit published3 Medium6 Low1 blocked by ARMR today2 not blocked5 Working exploit published2 Forecast only1 No public exploit4 201113 Protected by Waratek1 Mitigation candidate1 No exploit published11 High1 Medium10 Low2 blocked by ARMR today1 not blocked12 Working exploit published1 No public exploit12 201212 Mitigation candidate1 No exploit published11 Medium12 not blocked12 Working exploit published1 No public exploit11 20130 201410 Protected by Waratek4 Mitigation candidate1 No exploit published5 High2 Medium8 blocked by ARMR today4 not blocked6 Working exploit published1 No public exploit9 20152 No exploit published2 High1 Medium1 not blocked2 No public exploit2 20166 Protected by Waratek2 No exploit published4 High2 Medium4 blocked by ARMR today2 not blocked4 Forecast only1 No public exploit5

200020022004200620082010201220142016

101 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2000-0759

Medium

2000-10-20

Mitigation candidate

Working exploit published

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.