Apache Tomcat Jk Web Server Connector vulnerabilities

2 CVEs affecting Apache Tomcat Jk Web Server Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1860, published 2007-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0774, published 2007-03-04. High severity, CVSS 7.5. EPSS: 81.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34…
CVE-2007-1860, published 2007-05-25. Medium severity, CVSS 5.0. EPSS: 13.2% chance of exploitation in the next 30 days. mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access…