Back to the CVE list
CVE-2025-24813 CISA KEV · Actively exploited

tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

CVSS score

8.6

EPSS probability

%99.9

Risk score

17.2

Published

1 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
A patch is available only for some products or versions

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-24813 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A flaw was found in Apache Tomcat. In certain conditions and configurations, this vulnerability allows a remote attacker to exploit a path equivalence flaw to view file system contents and add malicious content via a write-enabled Default Servlet in Apache Tomcat. For the vulnerability to be exploited, the following conditions must be true: writes to the default servlet are enabled (disabled by default), sensitive file uploads are sub-directories of a target URL for public uploads, attackers know the names of the files, and those files are subject to partial PUT uploads enabled by default. If an application uses file-based session persistence with default storage and includes exploitable libraries, remote code execution (RCE) is possible.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-24813 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hatred_hat_enterprise_linux_6:tomcat6 View
2Red Hatred_hat_enterprise_linux_6:tomcat6-admin-webapps View
3Red Hatred_hat_enterprise_linux_6:tomcat6-docs-webapp View
4Red Hatred_hat_enterprise_linux_6:tomcat6-el-2.1-api View
5Red Hatred_hat_enterprise_linux_6:tomcat6-javadoc View
6Red Hatred_hat_enterprise_linux_6:tomcat6-jsp-2.1-api View
7Red Hatred_hat_enterprise_linux_6:tomcat6-lib View
8Red Hatred_hat_enterprise_linux_6:tomcat6-log4j View
9Red Hatred_hat_enterprise_linux_6:tomcat6-servlet-2.5-api View
10Red Hatred_hat_enterprise_linux_6:tomcat6-webapps View
11Red Hatred_hat_enterprise_linux_6:tomcat6.src View
12Red Hat7Server-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
13Red Hat7Server-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el7jws.src View
14Red Hat7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
15Red Hat7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
16Red Hat7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
17Red Hat7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
18Red Hat7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
19Red Hat7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
20Red Hat7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
21Red Hat7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
22Red Hat7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
23Red Hat7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
24Red Hat7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el7jws.noarch View
25Red Hat8Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
26Red Hat8Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el8jws.src View
27Red Hat8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
28Red Hat8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
29Red Hat8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
30Red Hat8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
31Red Hat8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
32Red Hat8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
33Red Hat8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
34Red Hat8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
35Red Hat8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el8jws.noarch View
36Red Hat8Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
37Red Hat8Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el8jws.src View
38Red Hat8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
39Red Hat8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
40Red Hat8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
41Red Hat8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
42Red Hat8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
43Red Hat8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
44Red Hat8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
45Red Hat8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
46Red Hat8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-6.redhat_00007.1.el8jws.noarch View
47Red Hat9Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
48Red Hat9Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el9jws.src View
49Red Hat9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
50Red Hat9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
51Red Hat9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
52Red Hat9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
53Red Hat9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
54Red Hat9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
55Red Hat9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
56Red Hat9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
57Red Hat9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el9jws.noarch View
58Red Hat9Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
59Red Hat9Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el9jws.src View
60Red Hat9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
61Red Hat9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
62Red Hat9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
63Red Hat9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
64Red Hat9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
65Red Hat9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
66Red Hat9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
67Red Hat9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
68Red Hat9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-6.redhat_00007.1.el9jws.noarch View
69Red HatAppStream-10.0.Z:tomcat-1:10.1.36-1.el10_0.noarch View
70Red HatAppStream-10.0.Z:tomcat-1:10.1.36-1.el10_0.src View
71Red HatAppStream-10.0.Z:tomcat-admin-webapps-1:10.1.36-1.el10_0.noarch View
72Red HatAppStream-10.0.Z:tomcat-docs-webapp-1:10.1.36-1.el10_0.noarch View
73Red HatAppStream-10.0.Z:tomcat-el-5.0-api-1:10.1.36-1.el10_0.noarch View
74Red HatAppStream-10.0.Z:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.noarch View
75Red HatAppStream-10.0.Z:tomcat-lib-1:10.1.36-1.el10_0.noarch View
76Red HatAppStream-10.0.Z:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.noarch View
77Red HatAppStream-10.0.Z:tomcat-webapps-1:10.1.36-1.el10_0.noarch View
78Red HatAppStream-10.0.Z:tomcat9-1:9.0.87-5.el10_0.noarch View
79Red HatAppStream-10.0.Z:tomcat9-1:9.0.87-5.el10_0.src View
80Red HatAppStream-10.0.Z:tomcat9-admin-webapps-1:9.0.87-5.el10_0.noarch View
81Red HatAppStream-10.0.Z:tomcat9-docs-webapp-1:9.0.87-5.el10_0.noarch View
82Red HatAppStream-10.0.Z:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.noarch View
83Red HatAppStream-10.0.Z:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.noarch View
84Red HatAppStream-10.0.Z:tomcat9-lib-1:9.0.87-5.el10_0.noarch View
85Red HatAppStream-10.0.Z:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.noarch View
86Red HatAppStream-10.0.Z:tomcat9-webapps-1:9.0.87-5.el10_0.noarch View
87Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.3.noarch View
88Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.3.src View
89Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.3.noarch View
90Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.3.noarch View
91Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.3.noarch View
92Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.3.noarch View
93Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.3.noarch View
94Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.3.noarch View
95Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.3.noarch View
96Red HatAppStream-8.8.0.Z.EUS:tomcat-1:9.0.87-1.el8_8.4.noarch View
97Red HatAppStream-8.8.0.Z.EUS:tomcat-1:9.0.87-1.el8_8.4.src View
98Red HatAppStream-8.8.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.4.noarch View
99Red HatAppStream-8.8.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.4.noarch View
100Red HatAppStream-8.8.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.4.noarch View
101Red HatAppStream-8.8.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.4.noarch View
102Red HatAppStream-8.8.0.Z.EUS:tomcat-lib-1:9.0.87-1.el8_8.4.noarch View
103Red HatAppStream-8.8.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.4.noarch View
104Red HatAppStream-8.8.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el8_8.4.noarch View
105Red HatAppStream-9.2.0.Z.EUS:tomcat-1:9.0.87-1.el9_2.3.noarch View
106Red HatAppStream-9.2.0.Z.EUS:tomcat-1:9.0.87-1.el9_2.3.src View
107Red HatAppStream-9.2.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_2.3.noarch View
108Red HatAppStream-9.2.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_2.3.noarch View
109Red HatAppStream-9.2.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_2.3.noarch View
110Red HatAppStream-9.2.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.3.noarch View
111Red HatAppStream-9.2.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_2.3.noarch View
112Red HatAppStream-9.2.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.3.noarch View
113Red HatAppStream-9.2.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_2.3.noarch View
114Red HatAppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.3.noarch View
115Red HatAppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.3.src View
116Red HatAppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.3.noarch View
117Red HatAppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.3.noarch View
118Red HatAppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.3.noarch View
119Red HatAppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.3.noarch View
120Red HatAppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.3.noarch View
121Red HatAppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.3.noarch View
122Red HatAppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.3.noarch View
123Red HatAppStream-9.5.0.Z.MAIN:tomcat-1:9.0.87-2.el9_5.1.noarch View
124Red HatAppStream-9.5.0.Z.MAIN:tomcat-1:9.0.87-2.el9_5.1.src View
125Red HatAppStream-9.5.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-2.el9_5.1.noarch View
126Red HatAppStream-9.5.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-2.el9_5.1.noarch View
127Red HatAppStream-9.5.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-2.el9_5.1.noarch View
128Red HatAppStream-9.5.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-2.el9_5.1.noarch View
129Red HatAppStream-9.5.0.Z.MAIN:tomcat-lib-1:9.0.87-2.el9_5.1.noarch View
130Red HatAppStream-9.5.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-2.el9_5.1.noarch View
131Red HatAppStream-9.5.0.Z.MAIN:tomcat-webapps-1:9.0.87-2.el9_5.1.noarch View
132Red HatRed Hat JBoss Web Server 5 View
133Red HatRed Hat JBoss Web Server 6 View
134apachetomcat View
Total affected vendors: 2|Products: 134

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Fix released

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat fixes

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.6cvss_v3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Partial patch

22 düzeltme kanıtı bulundu; en az 11 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Open source
redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

Open source
redhat

Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

Open source
redhat

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

This CVE is marked as actively exploited in the CISA KEV catalogue, but no verified, downloadable public PoC or Metasploit module has been found yet. Evidence of active exploitation does not mean that public exploit code exists.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-24813 is associated with the following CWEs:

CWE-41: Common Weakness Enumeration Entry CWE-41

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-24813 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#2351129vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2025-24813vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2025-24813vendor-advisoryhttps://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgqvendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryBefore applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258patchBefore applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patch

CVSS Vector Radar Chart

8.6 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)Low

Kısmi yama

22 düzeltme kanıtı bulundu; en az 11 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Follow the vendor

RH
Red Hat logo
Red Hat
A
apache logo
apache

Weakness Type (CWE & CAPEC)

CWE-41

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-24813"