[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRVwgn33Nb0xP00AzKsBtmG8IBfwq7uKhOZK3jruFIuU":3,"g5a-risk:CVE-2025-24813":334},{"success":4,"data":5,"meta":331},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":37,"references":69,"referencesCount":36,"weaknesses":113,"weaknessesCount":134,"isActivelyExploited":4,"cisaInfo":135,"otxData":27,"relatedBlogPosts":136,"seoMetadata":137,"configurations":162,"relatedVendorCves":329,"notableEvents":330},"CVE-2025-24813","What is CVE-2025-24813?","Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and\u002For Information disclosure and\u002For malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nIf all of the following were true, a malicious user was able to view       security sensitive files and\u002For inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to       perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.","Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and\u002For Information disclosure and\u002For malicious content added to uploaded files ...","2025-03-10T17:15:35.067","2025-10-23T14:49:29.133",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":37},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":35,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED",10,6,[],[],0.99927,[40,40,40,40,40,40,40],"Critical",[44,49,52,55,60,65],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"10.1.0","cpe:2.3:a:apache:tomcat:10.1.0:milestone1:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"11.0.0","cpe:2.3:a:apache:tomcat:11.0.0:milestone1:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"netapp","bootstrap_os","-","cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*",{"vendor":61,"product":66,"version":63,"criteria":67,"vulnerable":68},"hci_compute_node","cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",false,[70,75,81,85,89,94,97,100,103,108],{"url":71,"source":72,"tags":73},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fj5fkjv2k477os90nczf2v9l61fb0kkgq","Apache",[74],"Vendor Advisory",{"url":76,"source":77,"tags":78},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F10\u002F5","Openwall",[79,80],"Mailing List","Third Party Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00003.html","Debian",[79,80],{"url":86,"source":87,"tags":88},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250321-0001\u002F","Netapp",[80],{"url":90,"source":91,"tags":92},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24813-detect-apache-tomcat-rce","Vicarius",[93],"Issue Tracking",{"url":95,"source":91,"tags":96},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24813-mitigate-apache-tomcat-rce",[93],{"url":98,"source":91,"tags":99},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24813-tomcat-detect-vulnerability",[93],{"url":101,"source":91,"tags":102},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24813-tomcat-mitigation-vulnerability",[93],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fgithub.com\u002Fabsholi7ly\u002FPOC-CVE-2025-24813\u002Fblob\u002Fmain\u002FREADME.md","GitHub",[107],"Exploit",{"url":109,"source":110,"tags":111},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24813","CISA",[80,112],"US Government Resource",[114,122,129],{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":121},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.","It is often convenient to serialize objects for communication or to save them for later use. However, deserialized data or code can often be modified without using the provided accessor functions if it does not use cryptography to protect itself. Furthermore, any cryptography would still be client-side security -- which is a dangerous security assumption.\nData that is untrusted can not be trusted to be well-formed.\nWhen developers place no restrictions on \"gadget chains,\" or series of instances and method invocations that can self-execute during the deserialization process (i.e., before the object is returned to the caller), it is sometimes possible for attackers to leverage them to perform unauthorized actions, like generating a shell.","Draft","Base","Simple",{"id":123,"name":124,"description":125,"extendedDescription":126,"status":127,"abstraction":128,"structure":121},"CWE-44","Path Equivalence: 'file.name' (Internal Dot)","The product accepts path input in the form of internal dot ('file.ordir') without appropriate validation, which can lead to ambiguous path resolution and allow an attacker to traverse the file system to unintended locations or access arbitrary files.","","Incomplete","Variant",{"id":130,"name":131,"description":132,"extendedDescription":126,"status":127,"abstraction":133,"structure":121},"CWE-706","Use of Incorrectly-Resolved Name or Reference","The product uses a name or reference to access a resource, but the name\u002Freference resolves to a resource that is outside of the intended control sphere.","Class",3,{"shortDescription":126,"requiredAction":126,"vulnerabilityName":126,"dateAdded":27},[],{"title":138,"metaDescription":139,"keywords":140,"canonicalUrl":141,"structuredData":142},"What is CVE-2025-24813? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-24813, a critical severity cyber security vulnerability from 2025. High exploit probability (99.9%). Path Equivalence: 'fi...","CVE-2025-24813, CVE-2025-24813 vulnerability, CVE-2025-24813 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, apache security, debian security, netapp security, tomcat vulnerability, debian_linux vulnerability, bootstrap_os vulnerability, hci_compute_node vulnerability, high risk vulnerability","\u002Fwhat-is\u002Fcve-2025-24813",{"@context":143,"@type":144,"headline":138,"description":139,"datePublished":10,"dateModified":11,"author":145,"publisher":149,"about":153,"mainEntityOfPage":157,"articleSection":160,"keywords":161},"https:\u002F\u002Fschema.org","TechArticle",{"@type":146,"name":147,"url":148},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":146,"name":147,"url":148,"logo":150},{"@type":151,"url":152},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":154,"name":6,"description":155,"additionalType":156},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":158,"@id":159},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-24813","Cybersecurity","CVE-2025-24813, CVE-2025-24813 vulnerability, CVE-2025-24813 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[163,312,318],{"Operator":27,"Negate":27,"Nodes":164},[165],{"Operator":166,"Negate":68,"CPEMatch":167},"OR",[168,171,175,179,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":169,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":170,"VersionEndIncluding":27},"EEADC2E0-4A95-47B8-B506-D8E677838967","9.0.99",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":173,"VersionEndExcluding":174,"VersionEndIncluding":27},"108D9F43-5A29-475E-9EE2-66CE8899B318","10.1.1","10.1.35",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":177,"VersionEndExcluding":178,"VersionEndIncluding":27},"B7E3D41F-F7C8-4BAB-A80B-287FACB0F7E4","11.0.1","11.0.3",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6D402B5D-5901-43EB-8E6A-ECBD512CE367",{"Vulnerable":4,"Criteria":182,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone10:*:*:*:*:*:*","33C71AE1-B38E-4783-BAC2-3CDA7B4D9EBA",{"Vulnerable":4,"Criteria":185,"MatchCriteriaID":186,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone11:*:*:*:*:*:*","F6BD4180-D3E8-42AB-96B1-3869ECF47F6C",{"Vulnerable":4,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone12:*:*:*:*:*:*","64668CCF-DBC9-442D-9E0F-FD40E1D0DDB7",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone13:*:*:*:*:*:*","FC64BB57-4912-481E-AE8D-C8FCD36142BB",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone14:*:*:*:*:*:*","49B43BFD-6B6C-4E6D-A9D8-308709DDFB44",{"Vulnerable":4,"Criteria":197,"MatchCriteriaID":198,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone15:*:*:*:*:*:*","919C16BD-79A7-4597-8D23-2CBDED2EF615",{"Vulnerable":4,"Criteria":200,"MatchCriteriaID":201,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone16:*:*:*:*:*:*","81B27C03-D626-42EC-AE4E-1E66624908E3",{"Vulnerable":4,"Criteria":203,"MatchCriteriaID":204,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone17:*:*:*:*:*:*","BD81405D-81A5-4683-A355-B39C912DAD2D",{"Vulnerable":4,"Criteria":206,"MatchCriteriaID":207,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone18:*:*:*:*:*:*","2DCE3576-86BC-4BB8-A5FB-1274744DFD7F",{"Vulnerable":4,"Criteria":209,"MatchCriteriaID":210,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone19:*:*:*:*:*:*","5571F54A-2EAC-41B6-BDA9-7D33CFE97F70",{"Vulnerable":4,"Criteria":212,"MatchCriteriaID":213,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone2:*:*:*:*:*:*","9846609D-51FC-4CDD-97B3-8C6E07108F14",{"Vulnerable":4,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone20:*:*:*:*:*:*","ED30E850-C475-4133-BDE3-74CB3768D787",{"Vulnerable":4,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone3:*:*:*:*:*:*","2E321FB4-0B0C-497A-BB75-909D888C93CB",{"Vulnerable":4,"Criteria":221,"MatchCriteriaID":222,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone4:*:*:*:*:*:*","3B0CAE57-AF7A-40E6-9519-F5C9F422C1BE",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone5:*:*:*:*:*:*","7CB9D150-EED6-4AE9-BCBE-48932E50035E",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone6:*:*:*:*:*:*","D334103F-F64E-4869-BCC8-670A5AFCC76C",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone7:*:*:*:*:*:*","941FCF7B-FFB6-4967-95C7-BB3D32C73DAF",{"Vulnerable":4,"Criteria":233,"MatchCriteriaID":234,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone8:*:*:*:*:*:*","CE1A9030-B397-4BA6-8E13-DA1503872DDB",{"Vulnerable":4,"Criteria":236,"MatchCriteriaID":237,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:10.1.0:milestone9:*:*:*:*:*:*","6284B74A-1051-40A7-9D74-380FEEEC3F88",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":239,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D1AA7FF6-E8E7-4BF6-983E-0A99B0183008",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone10:*:*:*:*:*:*","57088BDD-A136-45EF-A8A1-2EBF79CEC2CE",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone11:*:*:*:*:*:*","B32D1D7A-A04F-444E-8F45-BB9A9E4B0199",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone12:*:*:*:*:*:*","0092FB35-3B00-484F-A24D-7828396A4FF6",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone13:*:*:*:*:*:*","CB557E88-FA9D-4B69-AA6F-EAEE7F9B01AC",{"Vulnerable":4,"Criteria":253,"MatchCriteriaID":254,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone14:*:*:*:*:*:*","72D3C6F1-84FA-4F82-96C1-9A8DA1C1F30F",{"Vulnerable":4,"Criteria":256,"MatchCriteriaID":257,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone15:*:*:*:*:*:*","3521C81B-37D9-48FC-9540-D0D333B9A4A4",{"Vulnerable":4,"Criteria":259,"MatchCriteriaID":260,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone16:*:*:*:*:*:*","02A84634-A8F2-4BA9-B9F3-BEF36AEC5480",{"Vulnerable":4,"Criteria":262,"MatchCriteriaID":263,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone17:*:*:*:*:*:*","ECBBC1F1-C86B-40AF-B740-A99F6B27682A",{"Vulnerable":4,"Criteria":265,"MatchCriteriaID":266,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone18:*:*:*:*:*:*","9D2206B2-F3FF-43F2-B3E2-3CAAC64C691D",{"Vulnerable":4,"Criteria":268,"MatchCriteriaID":269,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone19:*:*:*:*:*:*","0495A538-4102-40D0-A35C-0179CFD52A9D",{"Vulnerable":4,"Criteria":271,"MatchCriteriaID":272,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone2:*:*:*:*:*:*","2AAD52CE-94F5-4F98-A027-9A7E68818CB6",{"Vulnerable":4,"Criteria":274,"MatchCriteriaID":275,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone20:*:*:*:*:*:*","77BA6600-0890-4BA1-B447-EC1746BAB4FD",{"Vulnerable":4,"Criteria":277,"MatchCriteriaID":278,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone21:*:*:*:*:*:*","7914D26B-CBD6-4846-9BD3-403708D69319",{"Vulnerable":4,"Criteria":280,"MatchCriteriaID":281,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone22:*:*:*:*:*:*","123C6285-03BE-49FC-B821-8BDB25D02863",{"Vulnerable":4,"Criteria":283,"MatchCriteriaID":284,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone23:*:*:*:*:*:*","8A28C2E2-B7BC-46CE-94E4-AE3EF172AA47",{"Vulnerable":4,"Criteria":286,"MatchCriteriaID":287,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone24:*:*:*:*:*:*","069B0D8E-8223-4C4E-A834-C6235D6C3450",{"Vulnerable":4,"Criteria":289,"MatchCriteriaID":290,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone25:*:*:*:*:*:*","E6282085-5716-4874-B0B0-180ECDEE128F",{"Vulnerable":4,"Criteria":292,"MatchCriteriaID":293,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone3:*:*:*:*:*:*","F1F981F5-035A-4EDD-8A9F-481EE8BC7FF7",{"Vulnerable":4,"Criteria":295,"MatchCriteriaID":296,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone4:*:*:*:*:*:*","03A171AF-2EC8-4422-912C-547CDB58CAAA",{"Vulnerable":4,"Criteria":298,"MatchCriteriaID":299,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone5:*:*:*:*:*:*","538E68C4-0BA4-495F-AEF8-4EF6EE7963CF",{"Vulnerable":4,"Criteria":301,"MatchCriteriaID":302,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone6:*:*:*:*:*:*","49350A6E-5E1D-45B2-A874-3B8601B3ADCC",{"Vulnerable":4,"Criteria":304,"MatchCriteriaID":305,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone7:*:*:*:*:*:*","5F50942F-DF54-46C0-8371-9A476DD3EEA3",{"Vulnerable":4,"Criteria":307,"MatchCriteriaID":308,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone8:*:*:*:*:*:*","D12C2C95-B79F-4AA4-8CE3-99A3EE7991AB",{"Vulnerable":4,"Criteria":310,"MatchCriteriaID":311,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:11.0.0:milestone9:*:*:*:*:*:*","98792138-DD56-42DF-9612-3BDC65EEC117",{"Operator":27,"Negate":27,"Nodes":313},[314],{"Operator":166,"Negate":68,"CPEMatch":315},[316],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":317,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":319,"Negate":27,"Nodes":320},"AND",[321,325],{"Operator":166,"Negate":68,"CPEMatch":322},[323],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":324,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"95BA156C-C977-4F0C-8DFB-3FAE9CC8C02D",{"Operator":166,"Negate":68,"CPEMatch":326},[327],{"Vulnerable":68,"Criteria":67,"MatchCriteriaID":328,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AD7447BC-F315-4298-A822-549942FC118B",[],[],{"lastModified":11,"cacheTime":332,"version":333},1792364698863,"2.0",{"score":335,"band":42,"action":336,"scoredAt":337},88,"Emergency patch","2026-10-16T07:06:19.614437+00:00"]