CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0050

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.926

EPSS Ranking 99.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-0050

Apache » Commons Fileupload » Version: 1.0

cpe:2.3:a:apache:commons_fileupload:1.0
Apache » Commons Fileupload » Version: 1.1

cpe:2.3:a:apache:commons_fileupload:1.1
Apache » Commons Fileupload » Version: 1.1.1

cpe:2.3:a:apache:commons_fileupload:1.1.1
Apache » Commons Fileupload » Version: 1.2

cpe:2.3:a:apache:commons_fileupload:1.2
Apache » Commons Fileupload » Version: 1.2.1

cpe:2.3:a:apache:commons_fileupload:1.2.1
Apache » Commons Fileupload » Version: 1.2.2

cpe:2.3:a:apache:commons_fileupload:1.2.2
Apache » Commons Fileupload » Version: 1.3

cpe:2.3:a:apache:commons_fileupload:1.3
Apache » Tomcat » Version: 7.0.0

cpe:2.3:a:apache:tomcat:7.0.0
Apache » Tomcat » Version: 7.0.1

cpe:2.3:a:apache:tomcat:7.0.1
Apache » Tomcat » Version: 7.0.10

cpe:2.3:a:apache:tomcat:7.0.10
Apache » Tomcat » Version: 7.0.11

cpe:2.3:a:apache:tomcat:7.0.11
Apache » Tomcat » Version: 7.0.12

cpe:2.3:a:apache:tomcat:7.0.12
Apache » Tomcat » Version: 7.0.13

cpe:2.3:a:apache:tomcat:7.0.13
Apache » Tomcat » Version: 7.0.14

cpe:2.3:a:apache:tomcat:7.0.14
Apache » Tomcat » Version: 7.0.15

cpe:2.3:a:apache:tomcat:7.0.15
Apache » Tomcat » Version: 7.0.16

cpe:2.3:a:apache:tomcat:7.0.16
Apache » Tomcat » Version: 7.0.17

cpe:2.3:a:apache:tomcat:7.0.17
Apache » Tomcat » Version: 7.0.18

cpe:2.3:a:apache:tomcat:7.0.18
Apache » Tomcat » Version: 7.0.19

cpe:2.3:a:apache:tomcat:7.0.19
Apache » Tomcat » Version: 7.0.2

cpe:2.3:a:apache:tomcat:7.0.2
Apache » Tomcat » Version: 7.0.20

cpe:2.3:a:apache:tomcat:7.0.20
Apache » Tomcat » Version: 7.0.21

cpe:2.3:a:apache:tomcat:7.0.21
Apache » Tomcat » Version: 7.0.22

cpe:2.3:a:apache:tomcat:7.0.22
Apache » Tomcat » Version: 7.0.23

cpe:2.3:a:apache:tomcat:7.0.23
Apache » Tomcat » Version: 7.0.24

cpe:2.3:a:apache:tomcat:7.0.24
Apache » Tomcat » Version: 7.0.25

cpe:2.3:a:apache:tomcat:7.0.25
Apache » Tomcat » Version: 7.0.26

cpe:2.3:a:apache:tomcat:7.0.26
Apache » Tomcat » Version: 7.0.27

cpe:2.3:a:apache:tomcat:7.0.27
Apache » Tomcat » Version: 7.0.28

cpe:2.3:a:apache:tomcat:7.0.28
Apache » Tomcat » Version: 7.0.29

cpe:2.3:a:apache:tomcat:7.0.29
Apache » Tomcat » Version: 7.0.3

cpe:2.3:a:apache:tomcat:7.0.3
Apache » Tomcat » Version: 7.0.30

cpe:2.3:a:apache:tomcat:7.0.30
Apache » Tomcat » Version: 7.0.31

cpe:2.3:a:apache:tomcat:7.0.31
Apache » Tomcat » Version: 7.0.32

cpe:2.3:a:apache:tomcat:7.0.32
Apache » Tomcat » Version: 7.0.33

cpe:2.3:a:apache:tomcat:7.0.33
Apache » Tomcat » Version: 7.0.34

cpe:2.3:a:apache:tomcat:7.0.34
Apache » Tomcat » Version: 7.0.35

cpe:2.3:a:apache:tomcat:7.0.35
Apache » Tomcat » Version: 7.0.36

cpe:2.3:a:apache:tomcat:7.0.36
Apache » Tomcat » Version: 7.0.37

cpe:2.3:a:apache:tomcat:7.0.37
Apache » Tomcat » Version: 7.0.38

cpe:2.3:a:apache:tomcat:7.0.38
Apache » Tomcat » Version: 7.0.39

cpe:2.3:a:apache:tomcat:7.0.39
Apache » Tomcat » Version: 7.0.4

cpe:2.3:a:apache:tomcat:7.0.4
Apache » Tomcat » Version: 7.0.40

cpe:2.3:a:apache:tomcat:7.0.40
Apache » Tomcat » Version: 7.0.41

cpe:2.3:a:apache:tomcat:7.0.41
Apache » Tomcat » Version: 7.0.42

cpe:2.3:a:apache:tomcat:7.0.42
Apache » Tomcat » Version: 7.0.43

cpe:2.3:a:apache:tomcat:7.0.43
Apache » Tomcat » Version: 7.0.44

cpe:2.3:a:apache:tomcat:7.0.44
Apache » Tomcat » Version: 7.0.45

cpe:2.3:a:apache:tomcat:7.0.45
Apache » Tomcat » Version: 7.0.46

cpe:2.3:a:apache:tomcat:7.0.46
Apache » Tomcat » Version: 7.0.47

cpe:2.3:a:apache:tomcat:7.0.47
Apache » Tomcat » Version: 7.0.48

cpe:2.3:a:apache:tomcat:7.0.48
Apache » Tomcat » Version: 7.0.49

cpe:2.3:a:apache:tomcat:7.0.49
Apache » Tomcat » Version: 7.0.5

cpe:2.3:a:apache:tomcat:7.0.5
Apache » Tomcat » Version: 7.0.50

cpe:2.3:a:apache:tomcat:7.0.50
Apache » Tomcat » Version: 7.0.6

cpe:2.3:a:apache:tomcat:7.0.6
Apache » Tomcat » Version: 7.0.7

cpe:2.3:a:apache:tomcat:7.0.7
Apache » Tomcat » Version: 7.0.8

cpe:2.3:a:apache:tomcat:7.0.8
Apache » Tomcat » Version: 7.0.9

cpe:2.3:a:apache:tomcat:7.0.9
Apache » Tomcat » Version: 8.0.0

cpe:2.3:a:apache:tomcat:8.0.0
Apache » Tomcat » Version: 8.0.1

cpe:2.3:a:apache:tomcat:8.0.1
Oracle » Retail Applications » Version: 12.0

cpe:2.3:a:oracle:retail_applications:12.0
Oracle » Retail Applications » Version: 12.0in

cpe:2.3:a:oracle:retail_applications:12.0in
Oracle » Retail Applications » Version: 13.0

cpe:2.3:a:oracle:retail_applications:13.0
Oracle » Retail Applications » Version: 13.1

cpe:2.3:a:oracle:retail_applications:13.1
Oracle » Retail Applications » Version: 13.2

cpe:2.3:a:oracle:retail_applications:13.2
Oracle » Retail Applications » Version: 13.3

cpe:2.3:a:oracle:retail_applications:13.3
Oracle » Retail Applications » Version: 13.4

cpe:2.3:a:oracle:retail_applications:13.4
Oracle » Retail Applications » Version: 14.0

cpe:2.3:a:oracle:retail_applications:14.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0050

Products

Pricing

Contact Us