ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-25329

—
CVSS 3.1
7.0 high
EPSS
9%p95
Published
()
Modified
Description

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.

Vendors
apachedebianoracle
Products
tomcat, debian linux, agile product lifecycle management, communications cloud native core policy, communications cloud native core security edge protection proxy, communications instant messaging server, database, graph server and client, instantis enterprisetrack, managed file transfer, mysql enterprise monitor, siebel ui framework
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (9.5%)

In the news

No ingested article mentions this CVE yet.