CVE-2011-1088
apache tomcat: no CVSS score yet. EPSS 6.5% chance of exploitation in the next 30 days. Fixed in org.apache.tomcat:tomcat 7.0.10.
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
- EPSS
- 6.5% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mg4v-rf8p-ghqq | Maven | org.apache.tomcat:tomcat | >=7.0.0 <7.0.10 | 7.0.10 |