Apache Tomcat
tomcatcounted 2026-10-07 03:22 UTC
As of 2026-10-07, 2 hosts ran Apache Tomcat with at least one known CVE on a service open at their latest check, across 1 version with CVEs; 28 distinct CVEs.
Known CVEs on hosts running it
2hosts with known CVEs
28distinct CVEs
1version with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 1 host with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 5.0.28 | 2 | 28 |
1 more version was seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2016-8735 CRITICAL 9.8 known exploited | 2 |
| CVE-2025-24813 CRITICAL 9.8 known exploited | 2 |
| CVE-2009-3548 HIGH 7.5 | 2 |
| CVE-2013-2185 HIGH 7.5 | 2 |
| CVE-2026-41284 HIGH 7.5 | 2 |
| CVE-2013-4444 MEDIUM 6.8 | 2 |
| CVE-2013-6357 MEDIUM 6.8 | 2 |
| CVE-2013-4286 MEDIUM 5.8 | 2 |
| CVE-2006-3835 MEDIUM 5.0 | 2 |
| CVE-2007-0450 MEDIUM 5.0 | 2 |
| CVE-2008-0128 MEDIUM 5.0 | 2 |
| CVE-2014-0075 MEDIUM 5.0 | 2 |
| CVE-2005-4838 MEDIUM 4.3 | 2 |
| CVE-2006-7195 MEDIUM 4.3 | 2 |
| CVE-2006-7196 MEDIUM 4.3 | 2 |
| CVE-2007-1355 MEDIUM 4.3 | 2 |
| CVE-2007-2449 MEDIUM 4.3 | 2 |
| CVE-2007-3382 MEDIUM 4.3 | 2 |
| CVE-2007-3385 MEDIUM 4.3 | 2 |
| CVE-2008-2938 MEDIUM 4.3 | 2 |
| CVE-2013-4322 MEDIUM 4.3 | 2 |
| CVE-2013-4590 MEDIUM 4.3 | 2 |
| CVE-2014-0096 MEDIUM 4.3 | 2 |
| CVE-2014-0099 MEDIUM 4.3 | 2 |
| CVE-2014-0119 MEDIUM 4.3 | 2 |
| CVE-2007-2450 LOW 3.5 | 2 |
| CVE-2007-1858 LOW 2.6 | 2 |
| CVE-2008-5519 LOW 2.6 | 2 |
Hosts: matches on services open at each host's latest check, over every version.