Apache Software Foundation Apache Tomcat Vulnerabilities: CVEs, CISA KEV & Security Advisories

This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation Apache Tomcat, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Apache Software Foundation Apache Tomcat Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Fixed in

Default status

Common weakness types

Disclosure activity by year

Other Apache Software Foundation products

Frequently asked questions

How many CVEs does Apache Software Foundation Apache Tomcat have?

How many Apache Software Foundation Apache Tomcat CVEs are in CISA KEV?

Are there public exploits for Apache Software Foundation Apache Tomcat vulnerabilities?

Which versions of Apache Software Foundation Apache Tomcat are affected?

What are the most common weakness types in Apache Software Foundation Apache Tomcat CVEs?

How many critical Apache Software Foundation Apache Tomcat vulnerabilities are there?

What is the average severity of Apache Software Foundation Apache Tomcat CVEs?

References

Track Apache Software Foundation Apache Tomcat vulnerabilities