Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Tomcat

141 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-24813 Exploited Public exploit EPSS 100%

    Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

    Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
    KEV Apr 1, 2025