CVE-2012-0022

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers…

published January 19, 2012

CVSS
—
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10478 · 95.7th percentile
Published
2012-01-19T02:00Z
EPSS history
Timeline
  • 19 JAN 02:00Z
    Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers…
    cvelistv5