Skip to content

Known vulnerabilities in Apache Tomcat

Is your version affected?

CVE Summary Score Published
CVE-2020-11996 A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and… Not rated Jun 26, 2020
CVE-2020-1938 Exploited Apache Tomcat Improper Privilege Management Vulnerability 9.8 Critical Feb 24, 2020
CVE-2020-1935 In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach… Not rated Feb 24, 2020
CVE-2019-17569 The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression Not rated Feb 24, 2020
CVE-2019-0221 The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided… Not rated May 28, 2019

Other Apache products