73 CVEs
5 in CISA KEV
org.apache.tomcat.embed Vulnerabilities
CVE security advisories and vulnerability history for org.apache.tomcat.embed.
73
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
12
Public exploits
With known exploit
7.5
Avg CVSS
2008–2026
Overview
org.apache.tomcat.embed has 73 published CVE records since 2008, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting org.apache.tomcat.embed products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.