CVE-2016-8735 Apache Tomcat Improper Access Control vulnerability
CriticalCVSS 9.8
EPSS 90.3%
CISA KEV
added 2023-05-12 · due 2023-06-02
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
CISA Known Exploited Vulnerability
- Date added
- 2023-05-12
- Due date (FCEB)
- 2023-06-02
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | < 6.0.48 | 6.0.48 |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.36 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.37 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.39 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.41 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.43 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.44 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.45 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 6.0.47 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | >= 7.0.0, < 7.0.73 | 7.0.73 |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.0 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.11 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.12 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.14 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.16 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.19 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.2 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.20 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.21 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.22 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.23 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.25 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.26 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.27 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.28 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.29 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.30 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.32 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.33 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.34 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.35 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.37 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.39 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.4 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.40 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.41 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.42 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.47 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.50 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.52 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.53 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.54 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.55 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.56 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.57 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.59 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.6 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.61 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.62 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.63 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.64 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.65 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.67 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.68 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.69 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.70 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.72 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 7.0.8 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | >= 8.0.0, < 8.0.39 | 8.0.39 |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.1 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.11 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.12 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.14 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.15 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.17 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.18 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.20 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.21 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.22 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.23 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.24 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.26 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.27 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.28 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.29 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.3 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.30 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.32 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.33 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.35 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.36 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.37 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.38 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.8 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.0.9 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | >= 8.5.0, < 8.5.7 | 8.5.7 |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.0 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.2 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.3 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.4 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 8.5.6 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | >= 9.0.0.M1, < 9.0.0.M12 | 9.0.0.M12 |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M1 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M10 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M11 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M3 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M4 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M6 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M8 | No fix listed |
| org.apache.tomcat/tomcat-catalina-jmx-remote(Maven) | = 9.0.0.M9 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | < 6.0.48 | 6.0.48 |
| org.apache.tomcat/tomcat-catalina(Maven) | >= 7.0.0, < 7.0.73 | 7.0.73 |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.0 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.11 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.12 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.14 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.16 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.19 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.2 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.20 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.21 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.22 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.23 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.25 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.26 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.27 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.28 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.29 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.30 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.32 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.33 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.34 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.35 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.37 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.39 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.4 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.40 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.41 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.42 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.47 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.50 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.52 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.53 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.54 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.55 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.56 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.57 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.59 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.6 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.61 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.62 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.63 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.64 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.65 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.67 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.68 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.69 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.70 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.72 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 7.0.8 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | >= 8.0.0, < 8.0.39 | 8.0.39 |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.1 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.11 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.12 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.14 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.15 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.17 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.18 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.20 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.21 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.22 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.23 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.24 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.26 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.27 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.28 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.29 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.3 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.30 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.32 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.33 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.35 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.36 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.37 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.38 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.8 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.0.9 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | >= 8.5.0, < 8.5.7 | 8.5.7 |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.0 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.2 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.3 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.4 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.5 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 8.5.6 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | >= 9.0.0.M1, < 9.0.0.M12 | 9.0.0.M12 |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M1 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M10 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M11 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M3 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M4 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M6 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M8 | No fix listed |
| org.apache.tomcat/tomcat-catalina(Maven) | = 9.0.0.M9 | No fix listed |
| Apache Tomcat | = before 6.0.48 | No fix listed |
| Apache Tomcat | = 7.x before 7.0.73 | No fix listed |
References
- Debian Security Tracker CVE-2016-8735 vendor-advisory
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- [tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/ mailing-list patch
- lists.apache.org
- security.netapp.com third-party-advisory
- USN-4557-1 third-party-advisory vendor-advisory
- web.archive.org
- web.archive.org
- www.cisa.gov government-resource us-government-resource
- www.oracle.com patch third-party-advisory
- www.oracle.com patch third-party-advisory
- RHSA-2017:0455 third-party-advisory vendor-advisory
- RHSA-2017:0456 third-party-advisory vendor-advisory
- github.com product
- github.com
- [tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list patch
- lists.apache.org
- [tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list patch
- lists.apache.org
- RHSA-2017:0457 third-party-advisory vendor-advisory
- seclists.org mailing-list mitigation third-party-advisory
- svn.apache.org broken-link patch
- svn.apache.org broken-link patch
- svn.apache.org broken-link patch
- svn.apache.org broken-link patch
- tomcat.apache.org release-notes vendor-advisory
- tomcat.apache.org release-notes vendor-advisory
- tomcat.apache.org release-notes vendor-advisory
- tomcat.apache.org release-notes vendor-advisory
- DSA-3738 mailing-list third-party-advisory vendor-advisory
- www.oracle.com patch third-party-advisory
- www.oracle.com patch third-party-advisory
- www.oracle.com patch third-party-advisory
- 94463 broken-link third-party-advisory vdb-entry
- 1037331 broken-link third-party-advisory vdb-entry
- github.com