Apache Tomcat Connectors — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Tomcat Connectors, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-41081 — CVSS 7.5 (high): Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a…
• CVE-2024-46544 — CVSS 5.9 (medium): Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing…
• CVE-2014-8111 — CVSS 5.0 (medium): Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote…