Lucene search
China National Vulnerability DatabaseCNVD-2022-74082HistoryNov 02, 2022 - 12:00 a.m.
Apache Tomcat Environment Issue Vulnerability (CNVD-2022-74082)
2022-11-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
0.002 Low
EPSS
Percentile
64.8%
Apache Tomcat is a lightweight Web application server from the Apache Foundation. The program implements support for Servlet and JavaServer Page (JSP). Apache Tomcat has an environment problem vulnerability that stems from the fact that Tomcat may have a request smuggling problem (Request Smuggling) when the rejectIllegalHeader is set to false. No details of the vulnerability are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Apache Tomcat >=8.5.0， | le | 8.5.52 | |
| Apache Tomcat >=9.0.0， | lt | 9.0.68 | |
| Apache Tomcat >=10.0.0， | lt | 10.0.27 | |
| Apache Tomcat >=10.1.0， | lt | 10.1.1 |
Related
cve
cve
CVE-2022-42252
2022-11-01 09:15:10
tomcat
tomcat
Fixed in Apache Tomcat 9.0.68
2022-10-07 00:00:00
Fixed in Apache Tomcat 10.0.27
2022-10-10 00:00:00
Fixed in Apache Tomcat 10.1.1
2022-10-11 00:00:00
kaspersky
kaspersky
KLA20034 SB vulnerability in Apache Tomcat
2022-10-10 00:00:00
KLA20032 SB vulnerability in Apache Tomcat
2022-10-07 00:00:00
KLA20033 SB vulnerability in Apache Tomcat
2022-10-11 00:00:00
nessus
nessus
Apache Tomcat 10.1.0.M1 < 10.1.1
2022-11-02 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-002)
2023-09-27 00:00:00
Apache Tomcat 9.0.0.M1 < 9.0.68
2022-11-03 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2023-1341)
2023-02-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4303-1)
2022-12-02 00:00:00
Apache Tomcat Request Smuggling Vulnerability (Oct 2022) - Linux
2022-11-02 00:00:00
veracode
veracode
HTTP Request Smuggling
2022-11-02 05:50:14
ibm
ibm
atlassian
atlassian
nvd
nvd
CVE-2022-42252
2022-11-01 09:15:10
redhatcve
redhatcve
CVE-2022-42252
2022-11-09 14:26:30
prion
prion
Cross site request forgery (csrf)
2022-11-01 09:15:00
cvelist
cvelist
CVE-2022-42252 Apache Tomcat request smuggling via malformed content-length
2022-11-01 00:00:00
github
github
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
osv
osv
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
CVE-2022-42252
2022-11-01 09:15:10
BIT-tomcat-2022-42252
2024-03-06 11:09:09
ubuntucve
ubuntucve
CVE-2022-42252
2022-11-01 00:00:00
freebsd
freebsd
Tomcat -- Request Smuggling
2022-10-31 00:00:00
f5
f5
K000133224 : Apache Tomcat vulnerability CVE-2022-42252
2023-03-28 00:00:00
debiancve
debiancve
CVE-2022-42252
2022-11-01 09:15:10
photon
photon
Important Photon OS Security Update - PHSA-2023-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-0518
2023-01-19 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DLA 3384-1] tomcat9 security update
2023-04-05 19:47:04
[SECURITY] [DSA 5381-1] tomcat9 security update
2023-04-05 20:07:07
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2023-04-15 22:03:44
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00