CVE-2016-8735: Apache Tomcat: aktif olarak istismar edilen açık

Açıklama (NVD)

Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

Özet bilgiler

EPSS

%90,34 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2023-05-12 · Son tarih: 2023-06-02

Gerekli aksiyon: Apply updates per vendor instructions.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu