Apache Tomcat Jk Connector — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Tomcat Jk Connector, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2016-6808 — CVSS 9.8 (critical): Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.
• CVE-2018-11759 — CVSS 7.5 (high): The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK…
• CVE-2018-1323 — CVSS 7.5 (high): The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it…