CVE-2016-3092High· 7.5▾ TwilightThe MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 7.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
36%
36% → 37%
The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
icewall_identity_manager = 5.0icewall_sso_agent_option = 10.0tomcat = 9.0.0tomcat = 8.0.0tomcat = 8.0.1tomcat = 8.0.3tomcat = 8.0.5tomcat = 8.0.8tomcat = 8.0.11tomcat = 8.0.12tomcat = 8.0.14tomcat = 8.0.15tomcat = 8.0.17tomcat = 8.0.18tomcat = 8.0.20tomcat = 8.0.21tomcat = 8.0.22tomcat = 8.0.23tomcat = 8.0.24tomcat = 8.0.26tomcat = 8.0.27tomcat = 8.0.28tomcat = 8.0.29tomcat = 8.0.30tomcat = 8.0.32tomcat = 8.0.33tomcat = 8.0.35debian_linux = 8.0tomcat = 8.5.0tomcat = 8.5.2commons_fileupload <= 1.3.1ubuntu_linux = 12.04ubuntu_linux = 14.04ubuntu_linux = 15.10ubuntu_linux = 16.04tomcat = 7.0.0tomcat = 7.0.1tomcat = 7.0.2tomcat = 7.0.4tomcat = 7.0.5tomcat = 7.0.6tomcat = 7.0.8tomcat = 7.0.10tomcat = 7.0.11tomcat = 7.0.12tomcat = 7.0.14tomcat = 7.0.16tomcat = 7.0.19tomcat = 7.0.20tomcat = 7.0.21tomcat = 7.0.22tomcat = 7.0.23tomcat = 7.0.25tomcat = 7.0.26tomcat = 7.0.27tomcat = 7.0.28tomcat = 7.0.29tomcat = 7.0.30tomcat = 7.0.32tomcat = 7.0.33tomcat = 7.0.34tomcat = 7.0.35tomcat = 7.0.37tomcat = 7.0.39tomcat = 7.0.40tomcat = 7.0.41tomcat = 7.0.42tomcat = 7.0.47tomcat = 7.0.50tomcat = 7.0.52tomcat = 7.0.53tomcat = 7.0.54tomcat = 7.0.55tomcat = 7.0.56tomcat = 7.0.57tomcat = 7.0.59tomcat = 7.0.61tomcat = 7.0.62tomcat = 7.0.63tomcat = 7.0.64tomcat = 7.0.65tomcat = 7.0.67tomcat = 7.0.68tomcat = 7.0.69Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2016-5388High· 8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment…
CVE-2016-1182High· 8.2ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, …
CVE-2014-0114High· 7.5Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote at…
CVE-2013-4286Medium· 5.8Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incor…
CVE-2013-4322Medium· 4.3Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a …
CVE-2012-3544Medium· 5.0Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.