Apache Software Foundation Apache Tomcat

• CVE-2021-43980 Low 3.7 Apache Tomcat: Information disclosure 2.4%
• CVE-2022-34305 Unrated XSS in examples web application 6.7%
• CVE-2022-25762 Unrated Response mix-up with WebSocket concurrent send and close 8.4%
• CVE-2022-29885 Unrated EncryptInterceptor does not provide complete protection on insecure networks 73.5%
• CVE-2022-23181 Unrated Local privilege escalation with FileStore 0.7%
• CVE-2021-42340 Unrated DoS via memory leak with WebSocket connections 11.8%
• CVE-2021-41079 Unrated Apache Tomcat DoS with unexpected TLS packet 7.2%
• CVE-2021-33037 Unrated Incorrect Transfer-Encoding handling with HTTP/1.0 74.7%
• CVE-2021-30640 Unrated Auth weakness in JNDIRealm 9.9%
• CVE-2021-30639 Unrated DoS after non-blocking IO error 6.9%
• CVE-2021-25122 Unrated Apache Tomcat h2c request mix-up 18.1%
• CVE-2021-25329 Unrated Incomplete fix for CVE-2020-9484 9.5%
• CVE-2021-24122 Unrated Apache Tomcat information disclosure 22.9%
• CVE-2020-17527 Unrated Apache Tomcat: Request header mix-up between HTTP/2 streams 24.6%