CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Last 24h 305 Last 7 days 2,689 Total CVEs 400,827 CISA KEV 1,731 Critical 42,364 All stats

Filters: Vendor: Oracle Product: Workload Manager Clear all

Page 1

CVE-2020-17527 HIGH

Apache Tomcat: Request header mix-up between HTTP/2 streams

CVSS 7.5 EPSS 24.62% Dec 3, 2020

CVE-2020-13935 HIGH

tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

CVSS 7.5 EPSS 86.61% Jul 14, 2020

CVE-2020-13934 HIGH

tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS

CVSS 7.5 EPSS 64.12% Jul 14, 2020

CVE-2020-11996 HIGH

tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS

CVSS 7.5 EPSS 26.70% Jun 26, 2020

CVE-2020-9484 HIGH

tomcat: deserialization flaw in session persistence storage leading to RCE

CVSS 7.0 EPSS 55.52% May 20, 2020

CVE-2020-1938 KEV CRITICAL

tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

CVSS 9.8 EPSS 99.27% Feb 24, 2020

CVE-2020-1935 MEDIUM

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

CVSS 4.8 EPSS 9.39% Feb 24, 2020

CVE-2019-17569 MEDIUM

tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling

CVSS 4.8 EPSS 8.87% Feb 24, 2020

CVE-2019-12418 HIGH

tomcat: local privilege escalation

CVSS 7.4 EPSS 1.22% Dec 23, 2019

CVE-2017-12617 KEV HIGH

tomcat: Remote Code Execution bypass for CVE-2017-12615

CVSS 8.1 EPSS 99.97% Oct 3, 2017

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2020-17527	Apache Tomcat: Request header mix-up between HTTP/2 streams	HIGH	7.5	24.62%		Dec 3, 2020
CVE-2020-13935	tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS	HIGH	7.5	86.61%		Jul 14, 2020
CVE-2020-13934	tomcat: OutOfMemoryException caused by HTTP/2 connection leak could lead to DoS	HIGH	7.5	64.12%		Jul 14, 2020
CVE-2020-11996	tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS	HIGH	7.5	26.70%		Jun 26, 2020
CVE-2020-9484	tomcat: deserialization flaw in session persistence storage leading to RCE	HIGH	7.0	55.52%		May 20, 2020
CVE-2020-1938 KEV	tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability	CRITICAL	9.8	99.27%		Feb 24, 2020
CVE-2020-1935	tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling	MEDIUM	4.8	9.39%		Feb 24, 2020
CVE-2019-17569	tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling	MEDIUM	4.8	8.87%		Feb 24, 2020
CVE-2019-12418	tomcat: local privilege escalation	HIGH	7.4	1.22%		Dec 23, 2019
CVE-2017-12617 KEV	tomcat: Remote Code Execution bypass for CVE-2017-12615	HIGH	8.1	99.97%		Oct 3, 2017

Rows per page

Showing 1 to 10 CVEs · page 1