Sploitus

225 exploited vulnerabilities in Apache Tomcat

Showing 51–100 of 225

Vendors
Alt Linux, Almalinux, Apache, Centos, Red Hat, Rocky Linux
With known exploits
225
Affected Apache Tomcat versions
≤ 7.0.88, 8.0.52, 8.5.31, 9.0.9, 8.0.0, 9.0.0, 6.0.45, 7.0.70, 8.0.36, 8.5.4, 8.5.76, 9.0.21, 9.0.90, 10.1.25, 11.0.0, 9.0.96, 10.1.31, 10.1.0, 9.0.106, 10.1.42, 11.0.8, 7.0.79, 7.0.0, 7.0.2, 7.0.4, 7.0.5, 7.0.6, 7.0.10, 7.0.11, 7.0.12, 7.0.14, 7.0.16, 7.0.19, 7.0.20, 7.0.21, 7.0.22, 7.0.23, 7.0.25, 7.0.26, 7.0.27, 7.0.28, 7.0.29, 7.0.30, 7.0.32, 7.0.33, 7.0.34, 7.0.35, 7.0.37, 7.0.39, 7.0.40, 7.0.41, 7.0.42, 7.0.47, 7.0.50, 7.0.52, 7.0.53, 7.0.54, 7.0.55, 7.0.56, 7.0.57, 7.0.59, 7.0.61, 7.0.109, 8.5.100, 9.0.118, 10.1.55, 11.0.22, 10.0.27, 9.0.117, 10.1.54, 11.0.21, 9.0.116, 10.1.53, 11.0.20, 9.0.115, 10.1.52, 11.0.18, 9.0.108, 10.1.44, 11.0.10, 8.5.99, 9.0.86, 10.1.19, 8.5.96, 9.0.83, 10.1.16, 8.5.94, 9.0.81, 10.1.14, 8.5.87, 9.0.73, 10.1.7, 8.5.88, 9.0.74, 10.1.8, 8.5.83, 9.0.68, 10.1.1
Affected Apache Commons Fileupload versions
< 1.6, 2.0.0, 1.5, 1.0
Affected Openmrs versions
≤ 2.7.8, 2.8.5
Affected Duraspace Dspace versions
≤ 5.10, 6.4
Affected Redhat Enterprise Linux Desktop versions
= 7.0
Affected Redhat Enterprise Linux Hpc Node versions
= 7.0
Affected Redhat Enterprise Linux Hpc Node Eus versions
= 7.2
Affected Redhat Enterprise Linux Server versions
= 7.0

Vulnerabilities with exploits

Highest CVSS first — 18 of these already have exploit code on Sploitus

CVE-2018-8034
CVSS 7.5 HIGH 2018-06-26FIX AVAILABLE
CVE-2016-5018 4 exploits
CVSS 9.1 CRITICAL 2016-09-05FIX AVAILABLE
CVE-2022-25762
CVSS 8.6 HIGH 2020-09-30FIX AVAILABLE
CVE-2025-48976 1 exploit
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2024-34750
CVSS 7.5 HIGH 2024-06-19FIX AVAILABLE
CVE-2024-52318 1 exploit
CVSS 6.1 MEDIUM 2024-11-11FIX AVAILABLE
CVE-2024-38286
CVSS 8.6 HIGH 2024-06-19FIX AVAILABLE
CVE-2025-49124
CVSS 8.4 HIGH 2025-06-09FIX AVAILABLE
CVE-2026-40075
CVSS 8.2 HIGH 2026-05-04FIX AVAILABLE
CVE-2022-31194
CVSS 8.2 HIGH 2022-08-01FIX AVAILABLE
CVE-2017-12615 20 exploits
CVSS 8.1 HIGH 2017-08-16FIX AVAILABLE
CVE-2016-5388
CVSS 8.1 HIGH 2016-07-18FIX AVAILABLE
CVE-2015-5346
CVSS 8.1 HIGH 2016-02-08FIX AVAILABLE
CVE-2026-43514
CVSS 3.7 LOW 2026-05-11FIX AVAILABLE
CVE-2026-43513
CVSS 7.5 HIGH 2026-05-11FIX AVAILABLE
CVE-2026-41284
CVSS 7.5 HIGH 2026-05-11FIX AVAILABLE
CVE-2026-34483
CVSS 7.5 HIGH 2026-04-02FIX AVAILABLE
CVE-2026-29146 3 exploits
CVSS 7.5 HIGH 2026-03-23FIX AVAILABLE
CVE-2026-29129
CVSS 7.5 HIGH 2026-03-23FIX AVAILABLE
CVE-2026-24880
CVSS 7.5 HIGH 2026-03-23FIX AVAILABLE
CVE-2026-24734
CVSS 7.5 HIGH 2026-01-01FIX AVAILABLE
CVE-2025-55668
CVSS 6.5 MEDIUM 2025-06-03FIX AVAILABLE
CVE-2025-48989
CVSS 7.5 HIGH 2025-05-29FIX AVAILABLE
CVE-2025-49125
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-48988 1 exploit
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-69420 2 exploits
CVSS 7.5 HIGH 2025-01-01
CVE-2024-38816 1 exploit
CVSS 7.5 HIGH 2024-09-12FIX AVAILABLE
CVE-2024-24749
CVSS 7.5 HIGH 2024-02-12FIX AVAILABLE
CVE-2024-24549 1 exploit
CVSS 7.5 HIGH 2024-02-19FIX AVAILABLE
CVE-2024-23672
CVSS 6.3 MEDIUM 2024-02-19FIX AVAILABLE
CVE-2023-46589
CVSS 7.5 HIGH 2023-11-13FIX AVAILABLE
CVE-2023-49694
CVSS 7.8 HIGH 2023-11-27
CVE-2023-42794
CVSS 5.9 MEDIUM 2023-10-10FIX AVAILABLE
CVE-2023-42795 1 exploit
CVSS 5.3 MEDIUM 2023-10-10FIX AVAILABLE
CVE-2023-44487 21 exploits
CVSS 7.5 HIGH 2023-01-11FIX AVAILABLE
CVE-2023-28709
CVSS 7.5 HIGH 2023-04-19FIX AVAILABLE
CVE-2023-34981
CVSS 7.5 HIGH 2023-05-19FIX AVAILABLE
CVE-2023-24998 1 exploit
CVSS 7.5 HIGH 2023-01-19FIX AVAILABLE
CVE-2022-27772
CVSS 7.8 HIGH 2022-03-30FIX AVAILABLE
CVE-2022-42252
CVSS 7.5 HIGH 2022-10-11FIX AVAILABLE
CVE-2022-29885 5 exploits
CVSS 7.5 HIGH 2022-04-28FIX AVAILABLE
CVE-2024-21733 3 exploits
CVSS 5.3 MEDIUM 2021-03-10FIX AVAILABLE
CVE-2020-13934
CVSS 7.5 HIGH 2020-07-05FIX AVAILABLE
CVE-2020-11996
CVSS 7.5 HIGH 2020-06-07FIX AVAILABLE
CVE-2020-13935 2 exploits
CVSS 7.5 HIGH 2020-07-05FIX AVAILABLE
CVE-2020-8022
CVSS 7.8 HIGH 2020-06-26FIX AVAILABLE
CVE-2016-5425 7 exploits
CVSS 7.8 HIGH 2016-10-10
CVE-2016-1240 8 exploits
CVSS 7.8 HIGH 2016-09-15FIX AVAILABLE
CVE-2002-2272 1 exploit
CVSS 7.8 HIGH 2002-12-31FIX AVAILABLE
CVE-2026-66299
CVSS 7.5 HIGH 2026-07-28FIX AVAILABLE