By publication date

Exploited and new serious CVEs: August 2011

38 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2011-2900Proof of concept	Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded yassl · yasslews · CWE-119 pre-auth RCE Memory safety	High7.5	—	13.2%	Aug 5, 2011
35Monitor	CVE-2011-1257No exploit	Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memicrosoft · internet explorer · CWE-362 pre-auth RCE Race condition	High7.6	—	15.2%	Aug 10, 2011
22Monitor	CVE-2011-1263No exploit	Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2 microsoft · windows server 2008 · CWE-79 Pre-auth XSS	Medium4.3	—	15.2%	Aug 10, 2011
43Plan	CVE-2011-1871No exploit	Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remmicrosoft · windows 7 · CWE-399 Pre-auth Denial of service	High7.8	—	38.4%	Aug 10, 2011
22Monitor	CVE-2011-1960No exploit	Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access contemicrosoft · internet explorer · CWE-668 Pre-auth	Medium4.3	—	17.6%	Aug 10, 2011
47Plan	CVE-2011-1961No exploit	The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote attamicrosoft · internet explorer pre-auth RCE	Critical9.3	—	34.2%	Aug 10, 2011
21Monitor	CVE-2011-1962No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read contmicrosoft · internet explorer · CWE-20 Pre-auth	Medium4.3	—	13.2%	Aug 10, 2011
44Plan	CVE-2011-1963No exploit	Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	23.3%	Aug 10, 2011
44Plan	CVE-2011-1964No exploit	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code microsoft · internet explorer · CWE-908 pre-auth RCE Memory safety	Critical9.3	—	23.3%	Aug 10, 2011
35Monitor	CVE-2011-1965Proof of concept	Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-basemicrosoft · windows 7 · CWE-399 Pre-auth Denial of service	High7.1	—	24.9%	Aug 10, 2011
57Plan	CVE-2011-1966No exploit	The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processingmicrosoft · windows server 2008 · CWE-20 pre-auth RCE	Critical10.0	—	55.2%	Aug 10, 2011
36Monitor	CVE-2011-1968No exploit	The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process pmicrosoft · windows 2003 server · CWE-399 Pre-auth Denial of service	High7.1	—	25.7%	Aug 10, 2011
27Monitor	CVE-2011-1970No exploit	The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which amicrosoft · windows 2003 server · CWE-119 Pre-auth Memory safety Denial of service	Medium5.0	—	23.0%	Aug 10, 2011
44Plan	CVE-2011-1972No exploit	Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allomicrosoft · visio · CWE-20 pre-auth RCE	Critical9.3	—	22.2%	Aug 10, 2011
50Plan	CVE-2011-1975No exploit	Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Wimicrosoft · windows 7 Pre-auth	Critical9.3	—	42.4%	Aug 10, 2011
23Monitor	CVE-2011-1976Proof of concept	Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows microsoft · report viewer · CWE-79 Pre-auth XSS	Medium4.3	—	20.8%	Aug 10, 2011
23Monitor	CVE-2011-1977No exploit	The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify funmicrosoft · .net framework · CWE-200 Pre-auth Info leak	Medium4.3	—	21.3%	Aug 10, 2011
23Monitor	CVE-2011-1978No exploit	Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers microsoft · .net framework · CWE-200 Pre-auth Info leak	Medium4.3	—	20.2%	Aug 10, 2011
44Plan	CVE-2011-1979No exploit	Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers microsoft · visio · CWE-20 pre-auth RCE	Critical9.3	—	22.2%	Aug 10, 2011
43Plan	CVE-2011-2130No exploit	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobeadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	11.5%	Aug 10, 2011
43Plan	CVE-2011-2134No exploit	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobeadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	11.5%	Aug 10, 2011
43Plan	CVE-2011-2137No exploit	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobeadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	11.5%	Aug 10, 2011
65This week	CVE-2011-2140Weaponized	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 oadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	82.2%	Aug 10, 2011
44Plan	CVE-2011-2414No exploit	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobeadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	11.8%	Aug 10, 2011
44Plan	CVE-2011-2415No exploit	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobeadobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	11.8%	Aug 10, 2011
44Plan	CVE-2011-2131Proof of concept	Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or cadobe · creative suite · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	22.2%	Aug 11, 2011
52Plan	CVE-2011-2404Weaponized	A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrahp · easy printer care software · CWE-94 pre-auth RCE	High7.5	—	73.7%	Aug 11, 2011
41Plan	CVE-2011-3011Weaponized	BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and conca · arcserve d2d · CWE-200 pre-auth RCE Info leak	Medium5.0	—	71.6%	Aug 15, 2011
55Plan	CVE-2011-0257Weaponized	Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appliapple · quicktime · CWE-189 pre-auth RCE	Critical9.3	—	60.1%	Aug 15, 2011
43Plan	CVE-2011-2748No exploit	The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause aisc · dhcp · CWE-20 Pre-auth Denial of service	High7.8	—	38.7%	Aug 15, 2011
43Plan	CVE-2011-2749No exploit	The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause aisc · dhcp · CWE-20 Pre-auth Denial of service	High7.8	—	38.7%	Aug 15, 2011
52Plan	CVE-2011-3142Proof of concept	Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute arwellintech · kingview · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	38.3%	Aug 16, 2011
46Plan	CVE-2011-2950Weaponized	Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 threalnetworks · realplayer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	28.6%	Aug 18, 2011
24Monitor	CVE-2011-2896No exploit	The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw functswi-prolog · swi-prolog · CWE-787 pre-auth RCE Memory safety	Medium5.1	—	11.9%	Aug 19, 2011
26Monitor	CVE-2011-3182Proof of concept	PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependphp · php Pre-auth Denial of service	Medium5.0	—	19.1%	Aug 25, 2011
61This week	CVE-2011-3192Weaponized	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a deniapache · http server · CWE-400 Pre-auth Denial of service	High7.8	—	98.9%	Aug 29, 2011
35Monitor	CVE-2011-2577Proof of concept	Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software vecisco · telepresence codec c40 Pre-auth Denial of service	High7.8	—	12.7%	Aug 31, 2011
35Monitor	CVE-2011-3190No exploit	Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibapache · tomcat · CWE-264 Pre-auth Auth bypass	High7.5	—	15.2%	Aug 31, 2011

CVE-2011-2900
34Monitor
Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded
HighCVSS 7.5Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
yassl · yasslewsAug 5, 2011
CVE-2011-1257
35Monitor
Race condition in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (me
HighCVSS 7.6No exploitEPSS 15%
- pre-auth RCE
- Race condition
microsoft · internet explorerAug 10, 2011
CVE-2011-1263
22Monitor
Cross-site scripting (XSS) vulnerability in the logon page in Remote Desktop Web Access (RD Web Access) in Microsoft Windows Server 2008 R2
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- XSS
microsoft · windows server 2008Aug 10, 2011
CVE-2011-1871
43Plan
Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows rem
HighCVSS 7.8No exploitEPSS 38%
- Pre-auth
- Denial of service
microsoft · windows 7Aug 10, 2011
CVE-2011-1960
22Monitor
Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access conte
MediumCVSS 4.3No exploitEPSS 17%
- Pre-auth
microsoft · internet explorerAug 10, 2011
CVE-2011-1961
47Plan
The telnet URI handler in Microsoft Internet Explorer 6 through 9 does not properly launch the handler application, which allows remote atta
CriticalCVSS 9.3No exploitEPSS 34%
- pre-auth RCE
microsoft · internet explorerAug 10, 2011
CVE-2011-1962
21Monitor
Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read cont
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
microsoft · internet explorerAug 10, 2011
CVE-2011-1963
44Plan
Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 23%
- pre-auth RCE
- Memory safety
microsoft · internet explorerAug 10, 2011
CVE-2011-1964
44Plan
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code
CriticalCVSS 9.3No exploitEPSS 23%
- pre-auth RCE
- Memory safety
microsoft · internet explorerAug 10, 2011
CVE-2011-1965
35Monitor
Tcpip.sys in the TCP/IP stack in Microsoft Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1 does not properly implement URL-base
HighCVSS 7.1Proof of conceptEPSS 24%
- Pre-auth
- Denial of service
microsoft · windows 7Aug 10, 2011
CVE-2011-1966
57Plan
The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processing
CriticalCVSS 10.0No exploitEPSS 55%
- pre-auth RCE
microsoft · windows server 2008Aug 10, 2011
CVE-2011-1968
36Monitor
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process p
HighCVSS 7.1No exploitEPSS 25%
- Pre-auth
- Denial of service
microsoft · windows 2003 serverAug 10, 2011
CVE-2011-1970
27Monitor
The DNS server in Microsoft Windows Server 2003 SP2 and Windows Server 2008 SP2, R2, and R2 SP1 does not properly initialize memory, which a
MediumCVSS 5.0No exploitEPSS 23%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 2003 serverAug 10, 2011
CVE-2011-1972
44Plan
Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allo
CriticalCVSS 9.3No exploitEPSS 22%
- pre-auth RCE
microsoft · visioAug 10, 2011
CVE-2011-1975
50Plan
Untrusted search path vulnerability in the Data Access Tracing component in Windows Data Access Components (Windows DAC) 6.0 in Microsoft Wi
CriticalCVSS 9.3No exploitEPSS 42%
- Pre-auth
microsoft · windows 7Aug 10, 2011
CVE-2011-1976
23Monitor
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows
MediumCVSS 4.3Proof of conceptEPSS 20%
- Pre-auth
- XSS
microsoft · report viewerAug 10, 2011
CVE-2011-1977
23Monitor
The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify fun
MediumCVSS 4.3No exploitEPSS 21%
- Pre-auth
- Info leak
microsoft · .net frameworkAug 10, 2011
CVE-2011-1978
23Monitor
Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers
MediumCVSS 4.3No exploitEPSS 20%
- Pre-auth
- Info leak
microsoft · .net frameworkAug 10, 2011
CVE-2011-1979
44Plan
Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers
CriticalCVSS 9.3No exploitEPSS 22%
- pre-auth RCE
microsoft · visioAug 10, 2011
CVE-2011-2130
43Plan
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2134
43Plan
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2137
43Plan
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2140
65This week
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 o
CriticalCVSS 10.0WeaponizedEPSS 82%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2414
44Plan
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2415
44Plan
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe
CriticalCVSS 10.0No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · flash playerAug 10, 2011
CVE-2011-2131
44Plan
Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1) allows remote attackers to execute arbitrary code or c
CriticalCVSS 9.3Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
adobe · creative suiteAug 11, 2011
CVE-2011-2404
52Plan
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitra
HighCVSS 7.5WeaponizedEPSS 73%
- pre-auth RCE
hp · easy printer care softwareAug 11, 2011
CVE-2011-3011
41Plan
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and con
MediumCVSS 5.0WeaponizedEPSS 71%
- pre-auth RCE
- Info leak
ca · arcserve d2dAug 15, 2011
CVE-2011-0257
55Plan
Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (appli
CriticalCVSS 9.3WeaponizedEPSS 60%
- pre-auth RCE
apple · quicktimeAug 15, 2011
CVE-2011-2748
43Plan
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a
HighCVSS 7.8No exploitEPSS 38%
- Pre-auth
- Denial of service
isc · dhcpAug 15, 2011
CVE-2011-2749
43Plan
The server in ISC DHCP 3.x and 4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a
HighCVSS 7.8No exploitEPSS 38%
- Pre-auth
- Denial of service
isc · dhcpAug 15, 2011
CVE-2011-3142
52Plan
Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute ar
CriticalCVSS 10.0Proof of conceptEPSS 38%
- pre-auth RCE
- Memory safety
wellintech · kingviewAug 16, 2011
CVE-2011-2950
46Plan
Heap-based buffer overflow in qcpfformat.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 th
CriticalCVSS 9.3WeaponizedEPSS 28%
- pre-auth RCE
- Memory safety
realnetworks · realplayerAug 18, 2011
CVE-2011-2896
24Monitor
The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw funct
MediumCVSS 5.1No exploitEPSS 11%
- pre-auth RCE
- Memory safety
swi-prolog · swi-prologAug 19, 2011
CVE-2011-3182
26Monitor
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-depend
MediumCVSS 5.0Proof of conceptEPSS 19%
- Pre-auth
- Denial of service
php · phpAug 25, 2011
CVE-2011-3192
61This week
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a deni
HighCVSS 7.8WeaponizedEPSS 98%
- Pre-auth
- Denial of service
apache · http serverAug 29, 2011
CVE-2011-2577
35Monitor
Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software ve
HighCVSS 7.8Proof of conceptEPSS 12%
- Pre-auth
- Denial of service
cisco · telepresence codec c40Aug 31, 2011
CVE-2011-3190
35Monitor
Certain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possib
HighCVSS 7.5No exploitEPSS 15%
- Pre-auth
- Auth bypass
apache · tomcatAug 31, 2011