Apache Tomcat Connectors vulnerabilities

3 CVEs affecting Apache Tomcat Connectors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-46544, published 2024-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8111, published 2015-04-21. Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days. Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified…
CVE-2023-41081, published 2023-09-13. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the…
CVE-2024-46544, published 2024-09-23. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure…