Product by Apache Software Foundation

    Apache TomEE

    10 known vulnerabilities in Apache TomEE (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache TomEE (Apache Software Foundation)
    CriticalCVE-2019-13990

    Software Quartz: XML External Entity (XXE)

    also in 27 other products

    		9.8
    CriticalCVE-2016-0779

    Apache Software Foundation TomEE: Code Execution

    		9.8
    CriticalCVE-2020-11969

    Apache TomEE: security vulnerability

    		9.8
    CriticalCVE-2020-13931

    Apache TomEE: security vulnerability

    		9.8
    HighCVE-2019-17359

    Apache Software Foundation TomEE: security vulnerability

    also in 20 other products

    		7.5
    HighCVE-2021-40690

    Bypass of the secureValidation property

    also in 18 other products

    		7.5
    HighCVE-2021-30468

    Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

    also in 5 other products

    		7.5
    MediumCVE-2021-33037

    Incorrect Transfer-Encoding handling with HTTP/1.0

    also in 23 other products

    		5.3
    MediumCVE-2019-17569

    Apache Tomcat: security vulnerability

    also in 16 other products

    		4.8
    MediumCVE-2018-8031

    Apache TomEE: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1

    All products by Apache Software Foundation