CVE-2016-3092

tomcat: Usage of vulnerable FileUpload package can result in denial of service

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.

La clase MultipartStream en Apache Commons Fileupload en versiones anteriores a 1.3.2, tal como se utiliza en Apache Tomcat 7.x en versiones anteriores a 7.0.70, 8.x en versiones anteriores a 8.0.36, 8.5.x en versiones anteriores a 8.5.3 y 9.x en versiones anteriores a 9.0.0.M7 y otros productos, permite a atacantes remotos provocar una denegación de servicio (consumo de CPU) a través de una cadena de límite largo.

A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer (4096 bytes) used to read the uploaded file if the boundary was the typical tens of bytes long.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-03-10 CVE Reserved
2016-06-30 CVE Published
2024-08-05 CVE Updated
2024-09-01 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (49)

URL	Tag	Source
http://mail-archives.apache.org/mod_mbox/commons-dev/201606.mbox/%3CCAF8HOZ%2BPq2QH8RnxBuJyoK1dOz6jrTiQypAC%2BH8g6oZkBg%2BCxg%40mail.gmail.com%3E	Mailing List
http://svn.apache.org/viewvc?view=revision&revision=1743480	X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	X_refsource_confirm
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	X_refsource_confirm
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html	X_refsource_confirm
http://www.securityfocus.com/bid/91453	Third Party Advisory
http://www.securitytracker.com/id/1036427	Vdb Entry
http://www.securitytracker.com/id/1036900	Vdb Entry
http://www.securitytracker.com/id/1037029	Vdb Entry
http://www.securitytracker.com/id/1039606	Vdb Entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289840	X_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324759	X_refsource_confirm
https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	Mailing List
https://security.netapp.com/advisory/ntap-20190212-0001	X_refsource_confirm
https://www.oracle.com/security-alerts/cpuapr2020.html	X_refsource_misc
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	X_refsource_misc

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://jvn.jp/en/jp/JVN89379547/index.html	2023-12-08
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000121	2023-12-08
http://lists.opensuse.org/opensuse-updates/2016-09/msg00025.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2068.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2069.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2070.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2071.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2072.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2599.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2807.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2016-2808.html	2023-12-08
http://rhn.redhat.com/errata/RHSA-2017-0457.html	2023-12-08
http://svn.apache.org/viewvc?view=revision&revision=1743722	2023-12-08
http://svn.apache.org/viewvc?view=revision&revision=1743738	2023-12-08
http://svn.apache.org/viewvc?view=revision&revision=1743742	2023-12-08
http://tomcat.apache.org/security-7.html	2023-12-08
http://tomcat.apache.org/security-8.html	2023-12-08
http://tomcat.apache.org/security-9.html	2023-12-08
http://www.debian.org/security/2016/dsa-3609	2023-12-08
http://www.debian.org/security/2016/dsa-3611	2023-12-08
http://www.debian.org/security/2016/dsa-3614	2023-12-08
http://www.ubuntu.com/usn/USN-3024-1	2023-12-08
http://www.ubuntu.com/usn/USN-3027-1	2023-12-08
https://access.redhat.com/errata/RHSA-2017:0455	2023-12-08
https://access.redhat.com/errata/RHSA-2017:0456	2023-12-08
https://bugzilla.redhat.com/show_bug.cgi?id=1349468	2017-03-07
https://security.gentoo.org/glsa/201705-09	2023-12-08
https://security.gentoo.org/glsa/202107-39	2023-12-08
https://access.redhat.com/security/cve/CVE-2016-3092	2017-03-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Hp Search vendor "Hp"		Icewall Identity Manager Search vendor "Hp" for product "Icewall Identity Manager"				5.0 Search vendor "Hp" for product "Icewall Identity Manager" and version "5.0"		-		Affected
Hp Search vendor "Hp"		Icewall Sso Agent Option Search vendor "Hp" for product "Icewall Sso Agent Option"				10.0 Search vendor "Hp" for product "Icewall Sso Agent Option" and version "10.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				9.0.0 Search vendor "Apache" for product "Tomcat" and version "9.0.0"		milestone1		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				9.0.0 Search vendor "Apache" for product "Tomcat" and version "9.0.0"		milestone3		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				9.0.0 Search vendor "Apache" for product "Tomcat" and version "9.0.0"		milestone4		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				9.0.0 Search vendor "Apache" for product "Tomcat" and version "9.0.0"		milestone6		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc1		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc10		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc2		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.0 Search vendor "Apache" for product "Tomcat" and version "8.0.0"		rc5		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.1 Search vendor "Apache" for product "Tomcat" and version "8.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.3 Search vendor "Apache" for product "Tomcat" and version "8.0.3"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.5 Search vendor "Apache" for product "Tomcat" and version "8.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.8 Search vendor "Apache" for product "Tomcat" and version "8.0.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.11 Search vendor "Apache" for product "Tomcat" and version "8.0.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.12 Search vendor "Apache" for product "Tomcat" and version "8.0.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.14 Search vendor "Apache" for product "Tomcat" and version "8.0.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.15 Search vendor "Apache" for product "Tomcat" and version "8.0.15"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.17 Search vendor "Apache" for product "Tomcat" and version "8.0.17"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.18 Search vendor "Apache" for product "Tomcat" and version "8.0.18"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.20 Search vendor "Apache" for product "Tomcat" and version "8.0.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.21 Search vendor "Apache" for product "Tomcat" and version "8.0.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.22 Search vendor "Apache" for product "Tomcat" and version "8.0.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.23 Search vendor "Apache" for product "Tomcat" and version "8.0.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.24 Search vendor "Apache" for product "Tomcat" and version "8.0.24"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.26 Search vendor "Apache" for product "Tomcat" and version "8.0.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.27 Search vendor "Apache" for product "Tomcat" and version "8.0.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.28 Search vendor "Apache" for product "Tomcat" and version "8.0.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.29 Search vendor "Apache" for product "Tomcat" and version "8.0.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.30 Search vendor "Apache" for product "Tomcat" and version "8.0.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.32 Search vendor "Apache" for product "Tomcat" and version "8.0.32"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.33 Search vendor "Apache" for product "Tomcat" and version "8.0.33"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.0.35 Search vendor "Apache" for product "Tomcat" and version "8.0.35"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.5.0 Search vendor "Apache" for product "Tomcat" and version "8.5.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				8.5.2 Search vendor "Apache" for product "Tomcat" and version "8.5.2"		-		Affected
Apache Search vendor "Apache"		Commons Fileupload Search vendor "Apache" for product "Commons Fileupload"				<= 1.3.1 Search vendor "Apache" for product "Commons Fileupload" and version " <= 1.3.1"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				15.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "15.10"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04"		lts		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.0 Search vendor "Apache" for product "Tomcat" and version "7.0.0"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.0 Search vendor "Apache" for product "Tomcat" and version "7.0.0"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.1 Search vendor "Apache" for product "Tomcat" and version "7.0.1"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.2 Search vendor "Apache" for product "Tomcat" and version "7.0.2"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.2 Search vendor "Apache" for product "Tomcat" and version "7.0.2"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.4 Search vendor "Apache" for product "Tomcat" and version "7.0.4"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.4 Search vendor "Apache" for product "Tomcat" and version "7.0.4"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.5 Search vendor "Apache" for product "Tomcat" and version "7.0.5"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.5 Search vendor "Apache" for product "Tomcat" and version "7.0.5"		beta		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.6 Search vendor "Apache" for product "Tomcat" and version "7.0.6"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.8 Search vendor "Apache" for product "Tomcat" and version "7.0.8"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.10 Search vendor "Apache" for product "Tomcat" and version "7.0.10"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.11 Search vendor "Apache" for product "Tomcat" and version "7.0.11"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.12 Search vendor "Apache" for product "Tomcat" and version "7.0.12"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.14 Search vendor "Apache" for product "Tomcat" and version "7.0.14"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.16 Search vendor "Apache" for product "Tomcat" and version "7.0.16"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.19 Search vendor "Apache" for product "Tomcat" and version "7.0.19"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.20 Search vendor "Apache" for product "Tomcat" and version "7.0.20"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.21 Search vendor "Apache" for product "Tomcat" and version "7.0.21"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.22 Search vendor "Apache" for product "Tomcat" and version "7.0.22"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.23 Search vendor "Apache" for product "Tomcat" and version "7.0.23"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.25 Search vendor "Apache" for product "Tomcat" and version "7.0.25"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.26 Search vendor "Apache" for product "Tomcat" and version "7.0.26"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.27 Search vendor "Apache" for product "Tomcat" and version "7.0.27"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.28 Search vendor "Apache" for product "Tomcat" and version "7.0.28"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.29 Search vendor "Apache" for product "Tomcat" and version "7.0.29"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.30 Search vendor "Apache" for product "Tomcat" and version "7.0.30"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.32 Search vendor "Apache" for product "Tomcat" and version "7.0.32"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.33 Search vendor "Apache" for product "Tomcat" and version "7.0.33"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.34 Search vendor "Apache" for product "Tomcat" and version "7.0.34"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.35 Search vendor "Apache" for product "Tomcat" and version "7.0.35"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.37 Search vendor "Apache" for product "Tomcat" and version "7.0.37"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.39 Search vendor "Apache" for product "Tomcat" and version "7.0.39"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.40 Search vendor "Apache" for product "Tomcat" and version "7.0.40"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.41 Search vendor "Apache" for product "Tomcat" and version "7.0.41"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.42 Search vendor "Apache" for product "Tomcat" and version "7.0.42"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.47 Search vendor "Apache" for product "Tomcat" and version "7.0.47"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.50 Search vendor "Apache" for product "Tomcat" and version "7.0.50"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.52 Search vendor "Apache" for product "Tomcat" and version "7.0.52"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.53 Search vendor "Apache" for product "Tomcat" and version "7.0.53"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.54 Search vendor "Apache" for product "Tomcat" and version "7.0.54"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.55 Search vendor "Apache" for product "Tomcat" and version "7.0.55"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.56 Search vendor "Apache" for product "Tomcat" and version "7.0.56"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.57 Search vendor "Apache" for product "Tomcat" and version "7.0.57"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.59 Search vendor "Apache" for product "Tomcat" and version "7.0.59"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.61 Search vendor "Apache" for product "Tomcat" and version "7.0.61"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.62 Search vendor "Apache" for product "Tomcat" and version "7.0.62"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.63 Search vendor "Apache" for product "Tomcat" and version "7.0.63"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.64 Search vendor "Apache" for product "Tomcat" and version "7.0.64"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.65 Search vendor "Apache" for product "Tomcat" and version "7.0.65"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.67 Search vendor "Apache" for product "Tomcat" and version "7.0.67"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.68 Search vendor "Apache" for product "Tomcat" and version "7.0.68"		-		Affected
Apache Search vendor "Apache"		Tomcat Search vendor "Apache" for product "Tomcat"				7.0.69 Search vendor "Apache" for product "Tomcat" and version "7.0.69"		-		Affected