Sploitus

225 exploited vulnerabilities in Apache Tomcat

Showing 101–150 of 225

Vendors
Apache, Atlassian, Linux Mint, Red Os, Canonical, Debian
With known exploits
225
Affected Apache Tomcat versions
≤ 7.0.109, 8.5.100, 9.0.118, 10.1.55, 11.0.22, 9.0.110, 10.0.27, 10.1.47, 11.0.12, 9.0.109, 10.1.45, 11.0.11, 9.0.0, 9.0.106, 10.1.42, 11.0.8, 9.0.107, 10.1.43, 11.0.9, 9.0.105, 10.1.41, 11.0.7, 8.5.64, 9.0.44, 10.0.2, 8.5.72, 9.0.54, 10.0.12, 10.0.0, 10.1.0, 10.0.3, 10.0.4, 8.5.61, 9.0.41, 8.5.59, 9.0.35, 9.0.35-3.39.1, 9.0.35-3.57.3, 9.0.36, 9.0.37, 9.0.38, 9.0.39, 7.0.86, 8.0.51, 8.5.30, 9.0.7, 8.0.0, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.12, 7.0.13, 7.0.14, 7.0.15, 7.0.16, 7.0.17, 7.0.18, 7.0.19, 7.0.20, 7.0.21, 7.0.22, 7.0.23, 7.0.24, 7.0.25, 7.0.26, 7.0.27, 7.0.28, 7.0.29, 7.0.30, 7.0.31, 7.0.32, 7.0.33, 7.0.34, 7.0.35, 7.0.36, 7.0.37, 7.0.38, 7.0.39, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.0.16, 6.0.17, 6.0.18, 6.0.19, 6.0.20, 6.0.21, 6.0.22, 6.0.23, 6.0.24, 6.0.25, 6.0.26, 6.0.27, 6.0.28, 6.0.29, 6.0.30, 6.0.31, 6.0.32, 6.0.33, 6.0.34, 6.0.35, 6.0.36, 6.0.37, 6.0.38, 6.0.39, 3.0, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.3, 3.3.1, 3.3.1a, 3.3.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.10, 4.1.11, 4.1.12, 4.1.13, 4.1.14, 4.1.15, 4.1.16, 4.1.17, 4.1.18, 4.1.19, 4.1.20, 7.0.84, 8.0.49, 8.5.27, 9.0.4, 8.5.73, 9.0.56, 10.0.14, 7.0.107, 7.0.108, 8.5.63, 9.0.43, 7.0.97, 8.5.47, 9.0.28, 5.5.25, 1.1.3, 4, 4.1.24, 4.1.28, 4.1.29, 4.1.31, 4.1.36, 5, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 9.0.117, 10.1.54, 11.0.21, 11.0.0, 9.0.96, 10.1.31, 8.5.66, 9.0.46, 10.0.6
Affected Linecorp Armeria versions
< 1.24.3
Affected Openmrs versions
< 2.1.5, 2.2.1, 2.3.5, 2.4.5, 2.5.3
Affected Jivesoftware Jive versions
All versions
Affected Oracle Retail Applications versions
= 12.0, 12.0in, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0
Affected Apache Tomcat Jk Web Server Connector versions
= 1.2.19, 1.2.20
Affected Liferay Liferay Portal versions
≤ 5.1.2, 6.0.5
Affected Theforeman Foreman versions
< 3.8.0

Vulnerabilities with exploits

Highest CVSS first — 21 of these already have exploit code on Sploitus

CVE-2026-42498
CVSS 7.3 HIGH 2026-05-11FIX AVAILABLE
CVE-2025-61795
CVSS 5.3 MEDIUM 2025-10-07FIX AVAILABLE
CVE-2025-55752 3 exploits
CVSS 7.5 HIGH 2025-09-08FIX AVAILABLE
CVE-2025-53506
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-52520
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-52434
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2025-46701 1 exploit
CVSS 7.3 HIGH 2025-05-12FIX AVAILABLE
CVE-2023-38493
CVSS 7.5 HIGH 2023-07-25FIX AVAILABLE
CVE-2022-23612
CVSS 7.5 HIGH 2022-02-22FIX AVAILABLE
CVE-2021-45968
CVSS 7.5 HIGH 2022-03-18FIX AVAILABLE
CVE-2021-41079
CVSS 7.5 HIGH 2021-03-10FIX AVAILABLE
CVE-2021-42340
CVSS 7.5 HIGH 2021-10-06FIX AVAILABLE
CVE-2021-30639
CVSS 7.5 HIGH 2021-04-06FIX AVAILABLE
CVE-2021-25122 1 exploit
CVSS 7.5 HIGH 2021-02-02FIX AVAILABLE
CVE-2020-17527
CVSS 7.5 HIGH 2020-11-17FIX AVAILABLE
CVE-2018-1336
CVSS 7.5 HIGH 2018-05-04FIX AVAILABLE
CVE-2017-5664 1 exploit
CVSS 7.5 HIGH 2017-05-10FIX AVAILABLE
CVE-2017-5647
CVSS 7.5 HIGH 2017-03-30FIX AVAILABLE
CVE-2017-12616 4 exploits
CVSS 7.5 HIGH 2017-08-16
CVE-2014-0050 7 exploits
CVSS 7.5 HIGH 2014-02-07FIX AVAILABLE
CVE-2011-3190
CVSS 7.5 HIGH 2011-08-31FIX AVAILABLE
CVE-2009-3548 12 exploits
CVSS 7.5 HIGH 2009-11-12FIX AVAILABLE
CVE-2007-0774 9 exploits
CVSS 7.5 HIGH 2007-03-04FIX AVAILABLE
CVE-2002-0682 1 exploit
CVSS 7.5 HIGH 2002-07-23
CVE-2018-1304
CVSS 5.9 MEDIUM 2018-02-11FIX AVAILABLE
CVE-2016-6816 6 exploits
CVSS 7.1 HIGH 2016-11-08FIX AVAILABLE
CVE-2022-23181 1 exploit
CVSS 7.0 HIGH 2022-01-20FIX AVAILABLE
CVE-2021-25329
CVSS 7.0 HIGH 2021-02-02
CVE-2020-9484 17 exploits
CVSS 7.0 HIGH 2019-09-10FIX AVAILABLE
CVE-2019-12418
CVSS 7.0 HIGH 2019-11-14FIX AVAILABLE
CVE-2011-1571 5 exploits
CVSS 6.8 MEDIUM 2011-05-07FIX AVAILABLE
CVE-2002-2009
CVSS 5.0 MEDIUM 2002-12-31FIX AVAILABLE
CVE-2018-1305 2 exploits
CVSS 6.5 MEDIUM 2018-02-11FIX AVAILABLE
CVE-2013-6357 6 exploits
CVSS 6.8 MEDIUM 2013-11-13FIX AVAILABLE
CVE-2002-1567 1 exploit
CVSS 6.8 MEDIUM 2003-09-19FIX AVAILABLE
CVE-2023-4886
CVSS 6.7 MEDIUM 2023-10-03
CVE-2026-34500
CVSS 6.5 MEDIUM 2026-04-02FIX AVAILABLE
CVE-2024-52317 1 exploit
CVSS 6.5 MEDIUM 2024-02-03FIX AVAILABLE
CVE-2022-44008
CVSS 6.5 MEDIUM 2022-11-16FIX AVAILABLE
CVE-2021-30640
CVSS 6.5 MEDIUM 2021-05-12FIX AVAILABLE
CVE-2026-25854
CVSS 6.1 MEDIUM 2026-03-23FIX AVAILABLE
CVE-2010-2227 2 exploits
CVSS 6.4 MEDIUM 2010-07-09FIX AVAILABLE
CVE-2000-0760 1 exploit
CVSS 6.4 MEDIUM 2000-10-20FIX AVAILABLE
CVE-2000-0759 1 exploit
CVSS 6.4 MEDIUM 2000-10-20FIX AVAILABLE
CVE-2023-41080
CVSS 6.1 MEDIUM 2023-08-25FIX AVAILABLE
CVE-2019-0221 3 exploits
CVSS 6.1 MEDIUM 2019-04-12FIX AVAILABLE
CVE-2021-23336
CVSS 5.9 MEDIUM 2021-02-13FIX AVAILABLE
CVE-2018-8037
CVSS 5.9 MEDIUM 2018-06-26FIX AVAILABLE
CVE-2019-17569
CVSS 5.8 MEDIUM 2020-02-11FIX AVAILABLE
CVE-2020-1935
CVSS 5.8 MEDIUM 2020-02-11FIX AVAILABLE