How many CVEs have patched process?

8 published CVEs changed process in apache/tomcat, in 26 distinct patches totalling 125 changed lines, between 2011 and 2024.

What is the latest CVE that changed process?

CVE-2024-52317 (Apache Tomcat Request and/or response mix-up), published 2024-11-18, changed lines 90 to 149 of java/org/apache/coyote/http2/StreamProcessor.java.

How does process compare to the rest of apache/tomcat?

apache/tomcat has 135 CVEs with a located fix in total; 8 of them changed process.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

process in apache/tomcat: Patched by 8 CVEs

Apache Tomcat Request and/or response mix-up

CVE-2024-52317 · java/org/apache/coyote/http2/StreamProcessor.java · lines 90–149 · +6 −5 in 3 hunks

Medium · CVSS 6.5

EPSS 2.1%2024-11-18

Apache Tomcat Race Condition vulnerability

CVE-2021-43980 · java/org/apache/coyote/AbstractProtocol.java · lines 777–1029 · +13 −12 in 8 hunks

Low · CVSS 3.7

EPSS 2.4%2022-09-28

Cross-site scripting in Apache Tomcat

CVE-2019-0221 · java/org/apache/catalina/ssi/SSIPrintenv.java · line 44 · +1 −2

Medium · CVSS 6.1

EPSS 59.2%2019-05-28

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

CVE-2017-5647 · java/org/apache/coyote/AbstractProtocol.java · lines 936–938 · +3 −4

High · CVSS 7.5

EPSS 16.8%2017-04-17

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

CVE-2011-3375 · java/org/apache/coyote/ajp/AjpAprProcessor.java · line 185 · +1 −1

Medium · CVSS 5.0

EPSS 6.3%2012-01-19

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

CVE-2011-3375 · java/org/apache/coyote/ajp/AjpNioProcessor.java · line 172 · +1 −1

Medium · CVSS 5.0

EPSS 6.3%2012-01-19

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

CVE-2011-3375 · java/org/apache/coyote/ajp/AjpProcessor.java · line 188 · +1 −1

Medium · CVSS 5.0

EPSS 6.3%2012-01-19

Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests

CVE-2011-3375 · java/org/apache/coyote/http11/AbstractHttp11Processor.java · line 900 · +0 −1

Medium · CVSS 5.0

EPSS 6.3%2012-01-19

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

CVE-2011-3190 · java/org/apache/coyote/ajp/AjpAprProcessor.java · lines 143–149 · +6 −4

High · CVSS 7.5

EPSS 15.2%2011-08-31

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

CVE-2011-3190 · java/org/apache/coyote/ajp/AjpNioProcessor.java · lines 129–136 · +6 −4

High · CVSS 7.5

EPSS 15.2%2011-08-31

Apache Tomcat Allows Remote Attackers to Spoof AJP Requests

CVE-2011-3190 · java/org/apache/coyote/ajp/AjpProcessor.java · lines 146–154 · +6 −5

High · CVSS 7.5

EPSS 15.2%2011-08-31

Improper Input Validation in Apache Tomcat

CVE-2011-2526 · java/org/apache/coyote/http11/Http11AprProcessor.java · lines 308–319 · +12 −1

Medium · CVSS 4.4

EPSS 0.7%2011-07-14

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/ajp/AjpAprProcessor.java · lines 319–335 · +0 −3 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/ajp/AjpAprProtocol.java · lines 200–224 · +2 −0 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/ajp/AjpProcessor.java · lines 337–344 · +0 −2 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/ajp/AjpProtocol.java · lines 192–215 · +2 −0 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/http11/Http11AprProcessor.java · lines 368–372 · +0 −2

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/http11/Http11AprProtocol.java · lines 341–366 · +2 −0 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/http11/Http11NioProcessor.java · lines 304–474 · +4 −9 in 4 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users

CVE-2011-1475 · java/org/apache/coyote/http11/Http11Protocol.java · lines 197–220 · +2 −0 in 2 hunks

Medium · CVSS 5.0

EPSS 8.7%2011-04-08

process

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track apache/tomcat CVEs