CVE-2002-0493: Apache Tomcat

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

Affected products

• Apache Tomcat: up to and including 3.3.2

Published 2002-08-12. Last modified 2026-06-16.