Skip to content

Product

org.apache.tomcat/tomcat-servlet-api vulnerabilities

1 published CVE affecting org.apache.tomcat/tomcat-servlet-api, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.tomcat/tomcat-servlet-api CVEs

Newest publication first

  1. CVE-2001-0590 Apache Tomcat Allows Source Disclosure

    Published
    MediumCVSS 5.0 EPSS 11.0% Public exploit

    Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.