WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2011-02-28✕Vendor org.apache.tomcat✕
Overview 5 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
5matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC20.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 20.0% No exploit published 4 80.0%
Critical 0 0.0% High 5 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 1 / quarter
No exploit published: 4Mitigation candidate: 1 High: 5 not blocked: 5 No public exploit: 4Working exploit published: 1
Q3 021 No exploit published1 High1 not blocked1 No public exploit1 Q4 021 Mitigation candidate1 High1 not blocked1 Working exploit published1 Q1 031 No exploit published1 High1 not blocked1 No public exploit1 Q2 030 Q3 030 Q4 030 Q1 040 Q2 040 Q3 040 Q4 040 Q1 050 Q2 050 Q3 050 Q4 051 No exploit published1 High1 not blocked1 No public exploit1 Q1 060 Q2 060 Q3 060 Q4 060 Q1 070 Q2 071 No exploit published1 High1 not blocked1 No public exploit1
Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05Q2 06Q4 06Q2 07
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2006-7197 High 2007-04-25 No exploit published No public exploit The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.
CVE-2005-4836 High 2005-12-31 No exploit published No public exploit The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.
CVE-2002-1394 High 2003-01-17 No exploit published No public exploit Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
CVE-2002-2272 High 2002-12-31 Mitigation candidate Working exploit published Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
CVE-2002-0493 High 2002-08-12 No exploit published No public exploit Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.