How many vulnerabilities affect Tomcat?

There are currently 268 known vulnerabilities (CVEs) affecting Tomcat tracked in the Strobes VI database.

Are there exploits available for Tomcat vulnerabilities?

Some vulnerabilities affecting Tomcat have known public exploits. Check individual CVE pages for exploit details and mitigation guidance.

How should I prioritize Tomcat vulnerabilities?

Prioritize based on Strobes Priority Score, which combines CVSS severity, EPSS exploitation probability, exploit availability, and patch status. Focus first on vulnerabilities with high Priority Scores and available exploits.

CVE ID	Description	CVSS	Priority	Trend	Exploit	Patch

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Tomcat Vulnerabilities

Known vulnerabilities affecting Tomcat products and systems

Total: 268 vulnerabilitiesPage 2

CVE ID	Description	CVSS	Priority	Trend	Exploit	Patch
CVE-2026-43515	Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, ...	9.1	611	Neutral	No

Showing 21 - 40 of 268

Previous Next