Skip to content
OpenAdvisories
Unscored DSA-3447-1 1 CVE

tomcat7 - security update

Published Jan 17, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 tomcat7 7.0.28-4+deb7u3
Debian · 8 tomcat7 7.0.56-3+deb8u1

Vulnerabilities 1

  • Medium —
    CVE-2014-7810 EPSS 13%

    Improper Access Control in Apache Tomcat

    The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypa…