Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

Apache Tomcat

The Apache Tomcat is an open-source Java Servlet Container developed by the Apache Software Foundation (ASF). Tomcat implements several Java EE specifications including Java Servlet JavaServer Pages (JSP) Java EL and WebSocket and provides a quotpure Javaquot HTTP web server environment in which Java code can run.

Official Site:

http://tomcat.apache.org/

Severity Summary:

Critical: 21 High: 88 Medium: 141 Low: 16
Reference
Title
Severity
CVE-2023-34981
Apache Tomcat Vulnerability
High
CVE-2022-25762
Apache Tomcat Improper Resource Shutdown or Release Vulnerability
High
CVE-2021-25122
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2021-41079
Apache Tomcat Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2020-17527
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2021-30639
Apache Tomcat Improper Handling of Exceptional Conditions Vulnerability
High
CVE-2021-42340
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability
High
CVE-2005-4836
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2021-25329
Apache Tomcat Deserialization of Untrusted Data Vulnerability
High
CVE-2002-0682
Apache Tomcat Other Vulnerability
High
CVE-2020-13934
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2002-1394
Apache Tomcat Other Vulnerability
High
CVE-2013-2185
Apache Tomcat Improper Input Validation Vulnerability
High
CVE-2016-6797
Apache Tomcat Incorrect Authorization Vulnerability
High
CVE-2016-6796
Apache Tomcat Insufficient Information Vulnerability
High
CVE-2022-23181
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
High
CVE-2002-2272
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
High
CVE-2015-8751
Apache Tomcat Integer Overflow or Wraparound Vulnerability
High
CVE-2020-13935
Apache Tomcat Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2025-31650
Apache Tomcat Incomplete Cleanup Vulnerability
High
CVE-2017-12615
Apache Tomcat Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2024-24549
Apache Tomcat Vulnerability
High
CVE-2026-53404
Apache Tomcat Always-Incorrect Control Flow Implementation Vulnerability
High
CVE-2026-55957
Apache Tomcat Missing Critical Step in Authentication Vulnerability
High
CVE-2026-41284
Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability
High
CVE-2026-42498
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2026-43513
Apache Tomcat Improper Handling of Case Sensitivity Vulnerability
High
CVE-2026-24880
Apache Tomcat Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) Vulnerability
High
CVE-2026-29129
Apache Tomcat Use of a Broken or Risky Cryptographic Algorithm Vulnerability
High
CVE-2026-29146
Apache Tomcat Generation of Error Message Containing Sensitive Information Vulnerability
High