CVE-2005-3510: Apache Tomcat

Medium severity, CVSS 5.0. EPSS: 6% chance of exploitation in the next 30 days.

Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

Affected products

• Apache Tomcat: version 5.5.0 only; version 5.5.1 only; version 5.5.2 only; version 5.5.3 only; version 5.5.4 only; version 5.5.5 only; …

Published 2005-11-06. Last modified 2026-06-16.