CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-7810

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.033

EPSS Ranking 86.8%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2014-7810

Apache » Tomcat » Version: 6.0.0

cpe:2.3:a:apache:tomcat:6.0.0
Apache » Tomcat » Version: 6.0.1

cpe:2.3:a:apache:tomcat:6.0.1
Apache » Tomcat » Version: 6.0.10

cpe:2.3:a:apache:tomcat:6.0.10
Apache » Tomcat » Version: 6.0.11

cpe:2.3:a:apache:tomcat:6.0.11
Apache » Tomcat » Version: 6.0.12

cpe:2.3:a:apache:tomcat:6.0.12
Apache » Tomcat » Version: 6.0.13

cpe:2.3:a:apache:tomcat:6.0.13
Apache » Tomcat » Version: 6.0.14

cpe:2.3:a:apache:tomcat:6.0.14
Apache » Tomcat » Version: 6.0.15

cpe:2.3:a:apache:tomcat:6.0.15
Apache » Tomcat » Version: 6.0.16

cpe:2.3:a:apache:tomcat:6.0.16
Apache » Tomcat » Version: 6.0.17

cpe:2.3:a:apache:tomcat:6.0.17
Apache » Tomcat » Version: 6.0.18

cpe:2.3:a:apache:tomcat:6.0.18
Apache » Tomcat » Version: 6.0.19

cpe:2.3:a:apache:tomcat:6.0.19
Apache » Tomcat » Version: 6.0.2

cpe:2.3:a:apache:tomcat:6.0.2
Apache » Tomcat » Version: 6.0.20

cpe:2.3:a:apache:tomcat:6.0.20
Apache » Tomcat » Version: 6.0.24

cpe:2.3:a:apache:tomcat:6.0.24
Apache » Tomcat » Version: 6.0.26

cpe:2.3:a:apache:tomcat:6.0.26
Apache » Tomcat » Version: 6.0.27

cpe:2.3:a:apache:tomcat:6.0.27
Apache » Tomcat » Version: 6.0.28

cpe:2.3:a:apache:tomcat:6.0.28
Apache » Tomcat » Version: 6.0.29

cpe:2.3:a:apache:tomcat:6.0.29
Apache » Tomcat » Version: 6.0.3

cpe:2.3:a:apache:tomcat:6.0.3
Apache » Tomcat » Version: 6.0.30

cpe:2.3:a:apache:tomcat:6.0.30
Apache » Tomcat » Version: 6.0.31

cpe:2.3:a:apache:tomcat:6.0.31
Apache » Tomcat » Version: 6.0.32

cpe:2.3:a:apache:tomcat:6.0.32
Apache » Tomcat » Version: 6.0.33

cpe:2.3:a:apache:tomcat:6.0.33
Apache » Tomcat » Version: 6.0.35

cpe:2.3:a:apache:tomcat:6.0.35
Apache » Tomcat » Version: 6.0.36

cpe:2.3:a:apache:tomcat:6.0.36
Apache » Tomcat » Version: 6.0.37

cpe:2.3:a:apache:tomcat:6.0.37
Apache » Tomcat » Version: 6.0.39

cpe:2.3:a:apache:tomcat:6.0.39
Apache » Tomcat » Version: 6.0.4

cpe:2.3:a:apache:tomcat:6.0.4
Apache » Tomcat » Version: 6.0.41

cpe:2.3:a:apache:tomcat:6.0.41
Apache » Tomcat » Version: 6.0.43

cpe:2.3:a:apache:tomcat:6.0.43
Apache » Tomcat » Version: 6.0.5

cpe:2.3:a:apache:tomcat:6.0.5
Apache » Tomcat » Version: 6.0.6

cpe:2.3:a:apache:tomcat:6.0.6
Apache » Tomcat » Version: 6.0.7

cpe:2.3:a:apache:tomcat:6.0.7
Apache » Tomcat » Version: 6.0.8

cpe:2.3:a:apache:tomcat:6.0.8
Apache » Tomcat » Version: 6.0.9

cpe:2.3:a:apache:tomcat:6.0.9
Apache » Tomcat » Version: 7.0.0

cpe:2.3:a:apache:tomcat:7.0.0
Apache » Tomcat » Version: 7.0.1

cpe:2.3:a:apache:tomcat:7.0.1
Apache » Tomcat » Version: 7.0.10

cpe:2.3:a:apache:tomcat:7.0.10
Apache » Tomcat » Version: 7.0.11

cpe:2.3:a:apache:tomcat:7.0.11
Apache » Tomcat » Version: 7.0.12

cpe:2.3:a:apache:tomcat:7.0.12
Apache » Tomcat » Version: 7.0.13

cpe:2.3:a:apache:tomcat:7.0.13
Apache » Tomcat » Version: 7.0.14

cpe:2.3:a:apache:tomcat:7.0.14
Apache » Tomcat » Version: 7.0.15

cpe:2.3:a:apache:tomcat:7.0.15
Apache » Tomcat » Version: 7.0.16

cpe:2.3:a:apache:tomcat:7.0.16
Apache » Tomcat » Version: 7.0.17

cpe:2.3:a:apache:tomcat:7.0.17
Apache » Tomcat » Version: 7.0.18

cpe:2.3:a:apache:tomcat:7.0.18
Apache » Tomcat » Version: 7.0.19

cpe:2.3:a:apache:tomcat:7.0.19
Apache » Tomcat » Version: 7.0.2

cpe:2.3:a:apache:tomcat:7.0.2
Apache » Tomcat » Version: 7.0.20

cpe:2.3:a:apache:tomcat:7.0.20
Apache » Tomcat » Version: 7.0.21

cpe:2.3:a:apache:tomcat:7.0.21
Apache » Tomcat » Version: 7.0.22

cpe:2.3:a:apache:tomcat:7.0.22
Apache » Tomcat » Version: 7.0.23

cpe:2.3:a:apache:tomcat:7.0.23
Apache » Tomcat » Version: 7.0.24

cpe:2.3:a:apache:tomcat:7.0.24
Apache » Tomcat » Version: 7.0.25

cpe:2.3:a:apache:tomcat:7.0.25
Apache » Tomcat » Version: 7.0.26

cpe:2.3:a:apache:tomcat:7.0.26
Apache » Tomcat » Version: 7.0.27

cpe:2.3:a:apache:tomcat:7.0.27
Apache » Tomcat » Version: 7.0.28

cpe:2.3:a:apache:tomcat:7.0.28
Apache » Tomcat » Version: 7.0.29

cpe:2.3:a:apache:tomcat:7.0.29
Apache » Tomcat » Version: 7.0.3

cpe:2.3:a:apache:tomcat:7.0.3
Apache » Tomcat » Version: 7.0.30

cpe:2.3:a:apache:tomcat:7.0.30
Apache » Tomcat » Version: 7.0.31

cpe:2.3:a:apache:tomcat:7.0.31
Apache » Tomcat » Version: 7.0.32

cpe:2.3:a:apache:tomcat:7.0.32
Apache » Tomcat » Version: 7.0.33

cpe:2.3:a:apache:tomcat:7.0.33
Apache » Tomcat » Version: 7.0.34

cpe:2.3:a:apache:tomcat:7.0.34
Apache » Tomcat » Version: 7.0.35

cpe:2.3:a:apache:tomcat:7.0.35
Apache » Tomcat » Version: 7.0.36

cpe:2.3:a:apache:tomcat:7.0.36
Apache » Tomcat » Version: 7.0.37

cpe:2.3:a:apache:tomcat:7.0.37
Apache » Tomcat » Version: 7.0.38

cpe:2.3:a:apache:tomcat:7.0.38
Apache » Tomcat » Version: 7.0.39

cpe:2.3:a:apache:tomcat:7.0.39
Apache » Tomcat » Version: 7.0.4

cpe:2.3:a:apache:tomcat:7.0.4
Apache » Tomcat » Version: 7.0.40

cpe:2.3:a:apache:tomcat:7.0.40
Apache » Tomcat » Version: 7.0.41

cpe:2.3:a:apache:tomcat:7.0.41
Apache » Tomcat » Version: 7.0.42

cpe:2.3:a:apache:tomcat:7.0.42
Apache » Tomcat » Version: 7.0.43

cpe:2.3:a:apache:tomcat:7.0.43
Apache » Tomcat » Version: 7.0.44

cpe:2.3:a:apache:tomcat:7.0.44
Apache » Tomcat » Version: 7.0.45

cpe:2.3:a:apache:tomcat:7.0.45
Apache » Tomcat » Version: 7.0.46

cpe:2.3:a:apache:tomcat:7.0.46
Apache » Tomcat » Version: 7.0.47

cpe:2.3:a:apache:tomcat:7.0.47
Apache » Tomcat » Version: 7.0.48

cpe:2.3:a:apache:tomcat:7.0.48
Apache » Tomcat » Version: 7.0.49

cpe:2.3:a:apache:tomcat:7.0.49
Apache » Tomcat » Version: 7.0.5

cpe:2.3:a:apache:tomcat:7.0.5
Apache » Tomcat » Version: 7.0.50

cpe:2.3:a:apache:tomcat:7.0.50
Apache » Tomcat » Version: 7.0.52

cpe:2.3:a:apache:tomcat:7.0.52
Apache » Tomcat » Version: 7.0.53

cpe:2.3:a:apache:tomcat:7.0.53
Apache » Tomcat » Version: 7.0.54

cpe:2.3:a:apache:tomcat:7.0.54
Apache » Tomcat » Version: 7.0.55

cpe:2.3:a:apache:tomcat:7.0.55
Apache » Tomcat » Version: 7.0.56

cpe:2.3:a:apache:tomcat:7.0.56
Apache » Tomcat » Version: 7.0.57

cpe:2.3:a:apache:tomcat:7.0.57
Apache » Tomcat » Version: 7.0.6

cpe:2.3:a:apache:tomcat:7.0.6
Apache » Tomcat » Version: 7.0.7

cpe:2.3:a:apache:tomcat:7.0.7
Apache » Tomcat » Version: 7.0.8

cpe:2.3:a:apache:tomcat:7.0.8
Apache » Tomcat » Version: 7.0.9

cpe:2.3:a:apache:tomcat:7.0.9
Apache » Tomcat » Version: 8.0.0

cpe:2.3:a:apache:tomcat:8.0.0
Apache » Tomcat » Version: 8.0.1

cpe:2.3:a:apache:tomcat:8.0.1
Apache » Tomcat » Version: 8.0.11

cpe:2.3:a:apache:tomcat:8.0.11
Apache » Tomcat » Version: 8.0.12

cpe:2.3:a:apache:tomcat:8.0.12
Apache » Tomcat » Version: 8.0.14

cpe:2.3:a:apache:tomcat:8.0.14
Apache » Tomcat » Version: 8.0.15

cpe:2.3:a:apache:tomcat:8.0.15
Apache » Tomcat » Version: 8.0.3

cpe:2.3:a:apache:tomcat:8.0.3
Apache » Tomcat » Version: 8.0.5

cpe:2.3:a:apache:tomcat:8.0.5
Apache » Tomcat » Version: 8.0.8

cpe:2.3:a:apache:tomcat:8.0.8
Apache » Tomcat » Version: 8.0.9

cpe:2.3:a:apache:tomcat:8.0.9
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Hp » Hp-Ux » Version: 11.31

cpe:2.3:o:hp:hp-ux:11.31

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-7810

Products

Pricing

Contact Us