Exposure of Apache Tomcat

Web servers

342

exposure score

14,493

sites use

5

exploited

19

critical

CVEs

131 results

CVE-2025-40718MEDIUMImproper error handling vulnerability in Quiter GatewayEPSS 0.4%CVE-2026-43514LOWApache Tomcat: AJP secret compared in non-constant timeEPSS 0.4%CVE-2025-49124HIGHApache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for WindowsEPSS 0.3%CVE-2024-46544MEDIUMApache Tomcat Connectors: mod_jk: local users can view and modify configurationEPSS 0.3%CVE-2026-32990MEDIUMApache Tomcat: Fix for CVE-2025-66614 is incompleteEPSS 0.3%CVE-2026-29129HIGHApache Tomcat: TLS cipher order is not preservedEPSS 0.3%CVE-2025-66614HIGHApache Tomcat: Client certificate verification bypass due to virtual host mappingEPSS 0.2%CVE-2026-24734HIGHApache Tomcat Native, Apache Tomcat: OCSP revocation bypassEPSS 0.2%CVE-2025-40720MEDIUMReflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayEPSS 0.2%CVE-2025-40719MEDIUMReflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayEPSS 0.2%CVE-2025-40721MEDIUMReflected Cross-site Scripting (XSS) vulnerability in Quiter GatewayEPSS 0.2%

← previouspage 7 / 7next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →