CVE-2013-4322Medium· 4.3▾ TwilightPoC available

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a …

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score37/ 100 · Low

impact 23.7 · likelihood 1.8 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Feb 26, 2014

Updated

Oct 9, 2026

CVSS

4.3

Vendor

apache

Product

tomcat

CWE

CWE-20

Depth score

37 · Low

EPSS

9.1% · p95

Platforms

—

Source

NVD

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploit availability

Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.

checked 2026-10-27

GitHub PoCs

1 public repository

LiviuPtr/CVE-2013-4322_PoC ↗

CISA SSVC

decided 2026-10-09

Exploitation: none
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 9.

9.5% → 9.1%▼ 0.4%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 4627 days

Feb 26, 2014Published
Disclosed via NVD
Oct 9, 2026Record revised
Last analysed / modified upstream
Oct 9, 2026EPSS first tracked
9.5%
Oct 27, 2026Public exploit observed
1 GitHub repo (last check)

apache CWE-20 #nvd #exploit-available #cve.org

Affected

tomcat = 7.0.0
tomcat = 7.0.1
tomcat = 7.0.2
tomcat = 7.0.3
tomcat = 7.0.4
tomcat = 7.0.10
tomcat = 7.0.11
tomcat = 7.0.12
tomcat = 7.0.13
tomcat = 7.0.14
tomcat = 7.0.15
tomcat = 7.0.16
tomcat = 7.0.17
tomcat = 7.0.18
tomcat = 7.0.19
tomcat = 7.0.20
tomcat = 7.0.21
tomcat = 7.0.22
tomcat = 7.0.23
tomcat = 7.0.24
tomcat = 7.0.25
tomcat = 7.0.26
tomcat = 7.0.27
tomcat = 7.0.28
tomcat = 7.0.29
tomcat = 7.0.30
tomcat = 7.0.31
tomcat = 7.0.32
tomcat = 7.0.33
tomcat = 7.0.34
tomcat = 7.0.35
tomcat = 7.0.36
tomcat = 7.0.37
tomcat = 7.0.38
tomcat = 7.0.39
tomcat = 7.0.40
tomcat = 7.0.41
tomcat = 7.0.42
tomcat = 7.0.43
tomcat = 7.0.44
tomcat = 7.0.45
tomcat = 7.0.46
tomcat = 7.0.50
tomcat <= 6.0.37
tomcat = 1.1.3
tomcat = 3.0
tomcat = 3.1
tomcat = 3.1.1
tomcat = 3.2
tomcat = 3.2.1
tomcat = 3.2.2
tomcat = 3.2.3
tomcat = 3.2.4
tomcat = 3.3
tomcat = 3.3.1
tomcat = 3.3.1a
tomcat = 3.3.2
tomcat = 4
tomcat = 4.0.0
tomcat = 4.0.1
tomcat = 4.0.2
tomcat = 4.0.3
tomcat = 4.0.4
tomcat = 4.0.5
tomcat = 4.0.6
tomcat = 4.1.0
tomcat = 4.1.1
tomcat = 4.1.2
tomcat = 4.1.3
tomcat = 4.1.9
tomcat = 4.1.10
tomcat = 4.1.12
tomcat = 4.1.15
tomcat = 4.1.24
tomcat = 4.1.28
tomcat = 4.1.29
tomcat = 4.1.31
tomcat = 4.1.36
tomcat = 5
tomcat = 5.0.0
tomcat = 5.0.1
tomcat = 5.0.2
tomcat = 5.0.3
tomcat = 5.0.4
tomcat = 5.0.5
tomcat = 5.0.6
tomcat = 5.0.7
tomcat = 5.0.8
tomcat = 5.0.9
tomcat = 5.0.10
tomcat = 5.0.11
tomcat = 5.0.12
tomcat = 5.0.13
tomcat = 5.0.14
tomcat = 5.0.15
tomcat = 5.0.16
tomcat = 5.0.17
tomcat = 5.0.18
tomcat = 5.0.19
tomcat = 5.0.21

Full technical detail▾

Overview

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3544.

Affected

tomcat = 7.0.0
tomcat = 7.0.1
tomcat = 7.0.2
tomcat = 7.0.3
tomcat = 7.0.4
tomcat = 7.0.10
tomcat = 7.0.11
tomcat = 7.0.12
tomcat = 7.0.13
tomcat = 7.0.14
tomcat = 7.0.15
tomcat = 7.0.16
tomcat = 7.0.17
tomcat = 7.0.18
tomcat = 7.0.19
tomcat = 7.0.20
tomcat = 7.0.21
tomcat = 7.0.22
tomcat = 7.0.23
tomcat = 7.0.24
tomcat = 7.0.25
tomcat = 7.0.26
tomcat = 7.0.27
tomcat = 7.0.28
tomcat = 7.0.29
tomcat = 7.0.30
tomcat = 7.0.31
tomcat = 7.0.32
tomcat = 7.0.33
tomcat = 7.0.34
tomcat = 7.0.35
tomcat = 7.0.36
tomcat = 7.0.37
tomcat = 7.0.38
tomcat = 7.0.39
tomcat = 7.0.40
tomcat = 7.0.41
tomcat = 7.0.42
tomcat = 7.0.43
tomcat = 7.0.44
tomcat = 7.0.45
tomcat = 7.0.46
tomcat = 7.0.50
tomcat <= 6.0.37
tomcat = 1.1.3
tomcat = 3.0
tomcat = 3.1
tomcat = 3.1.1
tomcat = 3.2
tomcat = 3.2.1
tomcat = 3.2.2
tomcat = 3.2.3
tomcat = 3.2.4
tomcat = 3.3
tomcat = 3.3.1
tomcat = 3.3.1a
tomcat = 3.3.2
tomcat = 4
tomcat = 4.0.0
tomcat = 4.0.1
tomcat = 4.0.2
tomcat = 4.0.3
tomcat = 4.0.4
tomcat = 4.0.5
tomcat = 4.0.6
tomcat = 4.1.0
tomcat = 4.1.1
tomcat = 4.1.2
tomcat = 4.1.3
tomcat = 4.1.9
tomcat = 4.1.10
tomcat = 4.1.12
tomcat = 4.1.15
tomcat = 4.1.24
tomcat = 4.1.28
tomcat = 4.1.29
tomcat = 4.1.31
tomcat = 4.1.36
tomcat = 5
tomcat = 5.0.0
tomcat = 5.0.1
tomcat = 5.0.2
tomcat = 5.0.3
tomcat = 5.0.4
tomcat = 5.0.5
tomcat = 5.0.6
tomcat = 5.0.7
tomcat = 5.0.8
tomcat = 5.0.9
tomcat = 5.0.10
tomcat = 5.0.11
tomcat = 5.0.12
tomcat = 5.0.13
tomcat = 5.0.14
tomcat = 5.0.15
tomcat = 5.0.16
tomcat = 5.0.17
tomcat = 5.0.18
tomcat = 5.0.19
tomcat = 5.0.21

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#exploit-available#cve.org