Skip to content
OpenAdvisories

Product · Apache

Tomcat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2019-0232 Public exploit EPSS 100%

    Apache Tomcat OS Command Injection vulnerability

    When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windo…

    Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven