Lucene search
F5SOL65230547HistoryNov 14, 2016 - 12:00 a.m.
SOL65230547 - Apache Tomcat vulnerabilities CVE-2016-5018, CVE-2016-6794, and CVE-2016-6796
2016-11-1400:00:00
support.f5.com
198
0.002 Low
EPSS
Percentile
54.9%
Vulnerability Recommended Actions
If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in theVersions known to be not vulnerable column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.
Mitigation
To mitigate this vulnerability, you should permit access to the ARX GUI only over a secure network.
Supplemental Information
- SOL9970: Subscribing to email notifications regarding F5 products
- SOL9957: Creating a custom RSS feed to view new and updated documents
- SOL4602: Overview of the F5 security vulnerability response policy
- SOL4918: Overview of the F5 critical issue hotfix policy
Related
f5
f5
nessus
nessus
Debian DSA-3720-1 : tomcat8 - security update
2016-11-22 00:00:00
CentOS 7 : tomcat (CESA-2017:2247)
2017-08-25 00:00:00
RHEL 6 : tomcat5 (Unpatched Vulnerability)
2024-06-03 00:00:00
openvas
openvas
Debian Security Advisory DSA 3720-1 (tomcat8 - security update)
2016-11-21 00:00:00
RedHat Update for tomcat RHSA-2017:2247-01
2017-08-04 00:00:00
Debian: Security Advisory (DSA-3721-1)
2016-11-20 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 6.0.47
2016-10-16 00:00:00
Fixed in Apache Tomcat 9.0.0.M10
2016-09-05 00:00:00
Fixed in Apache Tomcat 8.5.5 and 8.0.37
2016-09-05 00:00:00
ibm
ibm
centos
centos
tomcat security update
2017-08-24 01:41:52
debian
debian
[SECURITY] [DSA 3720-1] tomcat8 security update
2016-11-21 18:49:12
[SECURITY] [DSA 3721-1] tomcat7 security update
2016-11-21 18:49:22
[SECURITY] [DSA 3721-1] tomcat7 security update
2016-11-21 18:49:22
freebsd
freebsd
tomcat -- multiple vulnerabilities
2016-10-27 00:00:00
osv
osv
tomcat8 - security update
2016-11-21 00:00:00
tomcat7 - security update
2016-11-21 00:00:00
tomcat6 vulnerabilities
2020-09-30 12:55:19
redhat
redhat
amazon
amazon
Important: tomcat6, tomcat7, tomcat8
2016-11-10 18:00:00
suse
suse
Security update for tomcat (important)
2016-12-10 23:07:49
Security update for tomcat (important)
2016-12-10 23:11:58
Security update for tomcat (important)
2016-12-14 01:14:48
mageia
mageia
Updated tomcat packages fix security vulnerability
2016-11-05 01:29:35
ubuntu
ubuntu
Tomcat vulnerabilities
2020-09-30 00:00:00
Tomcat vulnerabilities
2017-01-23 00:00:00
Tomcat regression
2017-02-02 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: tomcat-8.0.38-1.fc24
2016-11-12 23:56:29
[SECURITY] Fedora 25 Update: tomcat-8.0.38-1.fc25
2016-11-19 21:26:18
[SECURITY] Fedora 23 Update: tomcat-8.0.38-1.fc23
2016-11-13 02:21:02
cvelist
cvelist
github
github
System Property Disclosure in Apache Tomcat
2022-05-13 01:02:16
Apache Tomcat vulnerable to SecurityManager bypass
2022-05-13 01:02:16
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
2022-05-13 01:02:15
debiancve
debiancve
prion
prion
Design/Logic Flaw
2017-08-10 16:29:00
Design/Logic Flaw
2017-08-11 02:29:00
Design/Logic Flaw
2017-08-10 16:29:00
ubuntucve
ubuntucve
cve
cve
redhatcve
redhatcve
CVE-2016-6794
2016-11-01 10:17:21
nvd
nvd
exploitdb
exploitdb
Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape
2020-01-08 00:00:00
exploitpack
exploitpack
Tomcat proprietaryEvaluate 9.0.0.M1 - Sandbox Escape
2020-01-08 00:00:00
veracode
veracode
Security Manager Bypass
2019-01-15 09:17:22
packetstorm
packetstorm
Tomcat 9.0.0.M1 Sandbox Escape
2020-01-08 00:00:00
oraclelinux
oraclelinux
tomcat security, bug fix, and enhancement update
2017-08-07 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00