Vulnerabilities CVE-2016-8735

CVE-2016-8735

Medium

Open

KEV

TLP:CLEAR

Apache Tomcat Remote Code Execution Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Apache — Tomcat — Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

Details

EPSS Score ⓘ: 90.34%

99.8th percentile
Confidence: 100%
CISA KEV
Date Added: May 12, 2023
Patch Due: Jun 2, 2023
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.