Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

Apache Tomcat

The Apache Tomcat is an open-source Java Servlet Container developed by the Apache Software Foundation (ASF). Tomcat implements several Java EE specifications including Java Servlet JavaServer Pages (JSP) Java EL and WebSocket and provides a quotpure Javaquot HTTP web server environment in which Java code can run.

Official Site:

http://tomcat.apache.org/

Severity Summary:

Critical: 21 High: 88 Medium: 141 Low: 16
Reference
Title
Severity
CVE-2016-6816
Apache Tomcat Improper Input Validation Vulnerability
High
CVE-2014-0050
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
High
CVE-2016-9774
Apache Tomcat Improper Link Resolution Before File Access (Link Following) Vulnerability
High
CVE-2017-5647
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2020-8022
Apache Tomcat Incorrect Default Permissions Vulnerability
High
CVE-2019-0232
Apache Tomcat Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
High
CVE-2016-1240
Apache Tomcat Improper Input Validation Vulnerability
High
CVE-2015-5351
Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability
High
CVE-2015-5346
Apache Tomcat Other Vulnerability
High
CVE-2016-8747
Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2019-10072
Apache Tomcat Improper Locking Vulnerability
High
CVE-2018-1336
Apache Tomcat Loop with Unreachable Exit Condition (Infinite Loop) Vulnerability
High
CVE-2017-5650
Apache Tomcat Improper Resource Shutdown or Release Vulnerability
High
CVE-2016-9775
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
High
CVE-2019-17563
Apache Tomcat Session Fixation Vulnerability
High
CVE-2016-8745
Apache Tomcat 7PK - Errors Vulnerability
High
CVE-2020-11996
Apache Tomcat Uncontrolled Resource Consumption Vulnerability
High
CVE-2019-12418
Apache Tomcat Insufficiently Protected Credentials Vulnerability
High
CVE-2020-9484
Apache Tomcat Deserialization of Untrusted Data Vulnerability
High
CVE-2014-0096
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2019-2684
Apache Tomcat Vulnerability
Medium
CVE-2022-34305
Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-0095
Apache Tomcat Improper Input Validation Vulnerability
Medium
CVE-2012-3544
Apache Tomcat Improper Input Validation Vulnerability
Medium
CVE-2012-5568
Apache Tomcat Vulnerability
Medium
CVE-2014-0099
Apache Tomcat Numeric Errors Vulnerability
Medium
CVE-2023-42795
Apache Tomcat Incomplete Cleanup Vulnerability
Medium
CVE-2023-42794
Apache Tomcat Incomplete Cleanup Vulnerability
Medium
CVE-2014-0119
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2023-28708
Apache Tomcat Unprotected Transport of Credentials Vulnerability
Medium