Tomcat Connectors

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-46544 Sep 23, 11:15 MEDIUM This Month

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure. Rated medium severity (CVSS 5.9), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service Apache Information Disclosure Microsoft +4

NVD

CVSS 3.1

5.9

EPSS

0.3%

CVE-2023-41081 Sep 13, 10:15 HIGH PATCH This Week

Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apache Tomcat Tomcat Connectors

NVD

CVSS 3.1

7.5

EPSS

1.3%

CVE-2014-8111 Apr 21, 17:59 MEDIUM This Month

Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Apache Information Disclosure Tomcat Tomcat Connectors

NVD

CVSS 2.0

5.0

EPSS

3.7%

CVE-2024-46544

EPSS 0% CVSS 5.9

MEDIUM This Month

Privilege Escalation Denial Of Service Apache +6

NVD

CVE-2023-41081

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Authentication Bypass Apache Tomcat +1

NVD

CVE-2014-8111

EPSS 4% CVSS 5.0

MEDIUM This Month

Apache Information Disclosure Tomcat +1

NVD