Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Web Server

Apache Tomcat

The Apache Tomcat is an open-source Java Servlet Container developed by the Apache Software Foundation (ASF). Tomcat implements several Java EE specifications including Java Servlet JavaServer Pages (JSP) Java EL and WebSocket and provides a quotpure Javaquot HTTP web server environment in which Java code can run.

Official Site:

http://tomcat.apache.org/

Severity Summary:

Critical: 10 High: 64 Medium: 129 Low: 14
Reference
Title
Severity
CVE-2018-1304
Apache Tomcat Vulnerability
Medium
CVE-2021-24122
Apache Tomcat Use of Incorrectly-Resolved Name or Reference Vulnerability
Medium
CVE-2018-1305
Apache Tomcat Vulnerability
Medium
CVE-2017-15706
Apache Tomcat Improperly Implemented Security Check for Standard Vulnerability
Medium
CVE-2019-2684
Apache Tomcat Vulnerability
Medium
CVE-2022-34305
Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2014-0095
Apache Tomcat Improper Input Validation Vulnerability
Medium
CVE-2020-13943
Apache Tomcat Vulnerability
Medium
CVE-2014-9635
Apache Tomcat 7PK - Security Features Vulnerability
Medium
CVE-2014-9634
Apache Tomcat 7PK - Security Features Vulnerability
Medium
CVE-2005-2090
Apache Tomcat Other Vulnerability
Medium
CVE-2005-3510
Apache Tomcat Other Vulnerability
Medium
CVE-2005-4838
Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-1582
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2011-4858
Apache Tomcat Resource Management Errors Vulnerability
Medium
CVE-2011-3376
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2014-0096
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2011-2729
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2011-2481
Apache Tomcat Other Vulnerability
Medium
CVE-2011-2526
Apache Tomcat Improper Input Validation Vulnerability
Medium
CVE-2011-1475
Apache Tomcat Improper Input Validation Vulnerability
Medium
CVE-2011-5062
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium
CVE-2011-1183
Apache Tomcat Other Vulnerability
Medium
CVE-2011-1419
Apache Tomcat Other Vulnerability
Medium
CVE-2011-1088
Apache Tomcat Other Vulnerability
Medium
CVE-2011-0534
Apache Tomcat Resource Management Errors Vulnerability
Medium
CVE-2010-4312
Apache Tomcat Configuration Vulnerability
Medium
CVE-2010-4172
Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2009-2696
Apache Tomcat Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-1184
Apache Tomcat Permissions Privileges and Access Controls Vulnerability
Medium