CVE-2013-4590Medium· 4.3▾ Sunlit

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, .jspx, .tagx, o…

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score26/ 100 · Low

impact 23.7 · likelihood 1.9 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Feb 26, 2014

Updated

Oct 9, 2026

CVSS

4.3

Vendor

apache

Product

tomcat

CWE

CWE-200

Depth score

26 · Low

EPSS

9.5% · p95

Platforms

—

Source

NVD

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

CISA SSVC

decided 2026-10-09

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 9.

9.5% → 9.5%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 4608 days

Feb 26, 2014Published
Disclosed via NVD
Oct 9, 2026Record revised
Last analysed / modified upstream
Oct 9, 2026EPSS first tracked
9.5%

apache CWE-200 #nvd #cve.org

Affected

tomcat = 8.0.0
debian_linux = 7.0
tomcat <= 6.0.37
tomcat = 1.1.3
tomcat = 3.0
tomcat = 3.1
tomcat = 3.1.1
tomcat = 3.2
tomcat = 3.2.1
tomcat = 3.2.2
tomcat = 3.2.3
tomcat = 3.2.4
tomcat = 3.3
tomcat = 3.3.1
tomcat = 3.3.1a
tomcat = 3.3.2
tomcat = 4
tomcat = 4.0.0
tomcat = 4.0.1
tomcat = 4.0.2
tomcat = 4.0.3
tomcat = 4.0.4
tomcat = 4.0.5
tomcat = 4.0.6
tomcat = 4.1.0
tomcat = 4.1.1
tomcat = 4.1.2
tomcat = 4.1.3
tomcat = 4.1.9
tomcat = 4.1.10
tomcat = 4.1.12
tomcat = 4.1.15
tomcat = 4.1.24
tomcat = 4.1.28
tomcat = 4.1.29
tomcat = 4.1.31
tomcat = 4.1.36
tomcat = 5
tomcat = 5.0.0
tomcat = 5.0.1
tomcat = 5.0.2
tomcat = 5.0.3
tomcat = 5.0.4
tomcat = 5.0.5
tomcat = 5.0.6
tomcat = 5.0.7
tomcat = 5.0.8
tomcat = 5.0.9
tomcat = 5.0.10
tomcat = 5.0.11
tomcat = 5.0.12
tomcat = 5.0.13
tomcat = 5.0.14
tomcat = 5.0.15
tomcat = 5.0.16
tomcat = 5.0.17
tomcat = 5.0.18
tomcat = 5.0.19
tomcat = 5.0.21
tomcat = 5.0.22
tomcat = 5.0.23
tomcat = 5.0.24
tomcat = 5.0.25
tomcat = 5.0.26
tomcat = 5.0.27
tomcat = 5.0.28
tomcat = 5.0.29
tomcat = 5.0.30
tomcat = 5.5.0
tomcat = 5.5.1
tomcat = 5.5.2
tomcat = 5.5.3
tomcat = 5.5.4
tomcat = 5.5.5
tomcat = 5.5.6
tomcat = 5.5.7
tomcat = 5.5.8
tomcat = 5.5.9
tomcat = 5.5.10
tomcat = 5.5.11
tomcat = 5.5.12
tomcat = 5.5.13
tomcat = 5.5.14
tomcat = 5.5.15
tomcat = 5.5.16
tomcat = 5.5.17
tomcat = 5.5.18
tomcat = 5.5.19
tomcat = 5.5.20
tomcat = 5.5.21
tomcat = 5.5.22
tomcat = 5.5.23
tomcat = 5.5.24
tomcat = 5.5.25
tomcat = 5.5.26
tomcat = 5.5.27
tomcat = 5.5.28
tomcat = 5.5.29
tomcat = 5.5.30
tomcat = 5.5.31

Full technical detail▾

Overview

Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected

tomcat = 8.0.0
debian_linux = 7.0
tomcat <= 6.0.37
tomcat = 1.1.3
tomcat = 3.0
tomcat = 3.1
tomcat = 3.1.1
tomcat = 3.2
tomcat = 3.2.1
tomcat = 3.2.2
tomcat = 3.2.3
tomcat = 3.2.4
tomcat = 3.3
tomcat = 3.3.1
tomcat = 3.3.1a
tomcat = 3.3.2
tomcat = 4
tomcat = 4.0.0
tomcat = 4.0.1
tomcat = 4.0.2
tomcat = 4.0.3
tomcat = 4.0.4
tomcat = 4.0.5
tomcat = 4.0.6
tomcat = 4.1.0
tomcat = 4.1.1
tomcat = 4.1.2
tomcat = 4.1.3
tomcat = 4.1.9
tomcat = 4.1.10
tomcat = 4.1.12
tomcat = 4.1.15
tomcat = 4.1.24
tomcat = 4.1.28
tomcat = 4.1.29
tomcat = 4.1.31
tomcat = 4.1.36
tomcat = 5
tomcat = 5.0.0
tomcat = 5.0.1
tomcat = 5.0.2
tomcat = 5.0.3
tomcat = 5.0.4
tomcat = 5.0.5
tomcat = 5.0.6
tomcat = 5.0.7
tomcat = 5.0.8
tomcat = 5.0.9
tomcat = 5.0.10
tomcat = 5.0.11
tomcat = 5.0.12
tomcat = 5.0.13
tomcat = 5.0.14
tomcat = 5.0.15
tomcat = 5.0.16
tomcat = 5.0.17
tomcat = 5.0.18
tomcat = 5.0.19
tomcat = 5.0.21
tomcat = 5.0.22
tomcat = 5.0.23
tomcat = 5.0.24
tomcat = 5.0.25
tomcat = 5.0.26
tomcat = 5.0.27
tomcat = 5.0.28
tomcat = 5.0.29
tomcat = 5.0.30
tomcat = 5.5.0
tomcat = 5.5.1
tomcat = 5.5.2
tomcat = 5.5.3
tomcat = 5.5.4
tomcat = 5.5.5
tomcat = 5.5.6
tomcat = 5.5.7
tomcat = 5.5.8
tomcat = 5.5.9
tomcat = 5.5.10
tomcat = 5.5.11
tomcat = 5.5.12
tomcat = 5.5.13
tomcat = 5.5.14
tomcat = 5.5.15
tomcat = 5.5.16
tomcat = 5.5.17
tomcat = 5.5.18
tomcat = 5.5.19
tomcat = 5.5.20
tomcat = 5.5.21
tomcat = 5.5.22
tomcat = 5.5.23
tomcat = 5.5.24
tomcat = 5.5.25
tomcat = 5.5.26
tomcat = 5.5.27
tomcat = 5.5.28
tomcat = 5.5.29
tomcat = 5.5.30
tomcat = 5.5.31

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org