CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23181

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.0%

CVSS Severity

CVSS v3 Score 7.0

CVSS v2 Score 3.7

References

Products affected by CVE-2022-23181

Apache » Tomcat » Version: 10.0.0

cpe:2.3:a:apache:tomcat:10.0.0
Apache » Tomcat » Version: 10.0.1

cpe:2.3:a:apache:tomcat:10.0.1
Apache » Tomcat » Version: 10.0.10

cpe:2.3:a:apache:tomcat:10.0.10
Apache » Tomcat » Version: 10.0.11

cpe:2.3:a:apache:tomcat:10.0.11
Apache » Tomcat » Version: 10.0.12

cpe:2.3:a:apache:tomcat:10.0.12
Apache » Tomcat » Version: 10.0.13

cpe:2.3:a:apache:tomcat:10.0.13
Apache » Tomcat » Version: 10.0.14

cpe:2.3:a:apache:tomcat:10.0.14
Apache » Tomcat » Version: 10.0.2

cpe:2.3:a:apache:tomcat:10.0.2
Apache » Tomcat » Version: 10.0.3

cpe:2.3:a:apache:tomcat:10.0.3
Apache » Tomcat » Version: 10.0.4

cpe:2.3:a:apache:tomcat:10.0.4
Apache » Tomcat » Version: 10.0.5

cpe:2.3:a:apache:tomcat:10.0.5
Apache » Tomcat » Version: 10.0.6

cpe:2.3:a:apache:tomcat:10.0.6
Apache » Tomcat » Version: 10.0.7

cpe:2.3:a:apache:tomcat:10.0.7
Apache » Tomcat » Version: 10.0.8

cpe:2.3:a:apache:tomcat:10.0.8
Apache » Tomcat » Version: 10.0.9

cpe:2.3:a:apache:tomcat:10.0.9
Apache » Tomcat » Version: 10.1.0

cpe:2.3:a:apache:tomcat:10.1.0
Apache » Tomcat » Version: 8.5.55

cpe:2.3:a:apache:tomcat:8.5.55
Apache » Tomcat » Version: 8.5.56

cpe:2.3:a:apache:tomcat:8.5.56
Apache » Tomcat » Version: 8.5.57

cpe:2.3:a:apache:tomcat:8.5.57
Apache » Tomcat » Version: 8.5.58

cpe:2.3:a:apache:tomcat:8.5.58
Apache » Tomcat » Version: 8.5.59

cpe:2.3:a:apache:tomcat:8.5.59
Apache » Tomcat » Version: 8.5.60

cpe:2.3:a:apache:tomcat:8.5.60
Apache » Tomcat » Version: 8.5.61

cpe:2.3:a:apache:tomcat:8.5.61
Apache » Tomcat » Version: 8.5.62

cpe:2.3:a:apache:tomcat:8.5.62
Apache » Tomcat » Version: 8.5.63

cpe:2.3:a:apache:tomcat:8.5.63
Apache » Tomcat » Version: 8.5.64

cpe:2.3:a:apache:tomcat:8.5.64
Apache » Tomcat » Version: 8.5.65

cpe:2.3:a:apache:tomcat:8.5.65
Apache » Tomcat » Version: 8.5.66

cpe:2.3:a:apache:tomcat:8.5.66
Apache » Tomcat » Version: 8.5.67

cpe:2.3:a:apache:tomcat:8.5.67
Apache » Tomcat » Version: 8.5.68

cpe:2.3:a:apache:tomcat:8.5.68
Apache » Tomcat » Version: 8.5.69

cpe:2.3:a:apache:tomcat:8.5.69
Apache » Tomcat » Version: 8.5.70

cpe:2.3:a:apache:tomcat:8.5.70
Apache » Tomcat » Version: 8.5.71

cpe:2.3:a:apache:tomcat:8.5.71
Apache » Tomcat » Version: 8.5.72

cpe:2.3:a:apache:tomcat:8.5.72
Apache » Tomcat » Version: 8.5.73

cpe:2.3:a:apache:tomcat:8.5.73
Apache » Tomcat » Version: 9.0.35

cpe:2.3:a:apache:tomcat:9.0.35
Apache » Tomcat » Version: 9.0.35-3.39.1

cpe:2.3:a:apache:tomcat:9.0.35-3.39.1
Apache » Tomcat » Version: 9.0.35-3.57.3

cpe:2.3:a:apache:tomcat:9.0.35-3.57.3
Apache » Tomcat » Version: 9.0.36

cpe:2.3:a:apache:tomcat:9.0.36
Apache » Tomcat » Version: 9.0.37

cpe:2.3:a:apache:tomcat:9.0.37
Apache » Tomcat » Version: 9.0.38

cpe:2.3:a:apache:tomcat:9.0.38
Apache » Tomcat » Version: 9.0.39

cpe:2.3:a:apache:tomcat:9.0.39
Apache » Tomcat » Version: 9.0.40

cpe:2.3:a:apache:tomcat:9.0.40
Apache » Tomcat » Version: 9.0.41

cpe:2.3:a:apache:tomcat:9.0.41
Apache » Tomcat » Version: 9.0.42

cpe:2.3:a:apache:tomcat:9.0.42
Apache » Tomcat » Version: 9.0.43

cpe:2.3:a:apache:tomcat:9.0.43
Apache » Tomcat » Version: 9.0.44

cpe:2.3:a:apache:tomcat:9.0.44
Apache » Tomcat » Version: 9.0.45

cpe:2.3:a:apache:tomcat:9.0.45
Apache » Tomcat » Version: 9.0.46

cpe:2.3:a:apache:tomcat:9.0.46
Apache » Tomcat » Version: 9.0.47

cpe:2.3:a:apache:tomcat:9.0.47
Apache » Tomcat » Version: 9.0.48

cpe:2.3:a:apache:tomcat:9.0.48
Apache » Tomcat » Version: 9.0.49

cpe:2.3:a:apache:tomcat:9.0.49
Apache » Tomcat » Version: 9.0.50

cpe:2.3:a:apache:tomcat:9.0.50
Apache » Tomcat » Version: 9.0.51

cpe:2.3:a:apache:tomcat:9.0.51
Apache » Tomcat » Version: 9.0.52

cpe:2.3:a:apache:tomcat:9.0.52
Apache » Tomcat » Version: 9.0.53

cpe:2.3:a:apache:tomcat:9.0.53
Apache » Tomcat » Version: 9.0.54

cpe:2.3:a:apache:tomcat:9.0.54
Apache » Tomcat » Version: 9.0.55

cpe:2.3:a:apache:tomcat:9.0.55
Apache » Tomcat » Version: 9.0.56

cpe:2.3:a:apache:tomcat:9.0.56
Oracle » Agile Engineering Data Management » Version: 6.2.1.0

cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0
Oracle » Communications Cloud Native Core Policy » Version: 1.15.0

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.2.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.3.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0
Oracle » Managed File Transfer » Version: 12.2.1.3.0

cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0
Oracle » Managed File Transfer » Version: 12.2.1.4.0

cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0
Oracle » Mysql Enterprise Monitor » Version: N/A

cpe:2.3:a:oracle:mysql_enterprise_monitor:-
Oracle » Mysql Enterprise Monitor » Version: 2.3.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14
Oracle » Mysql Enterprise Monitor » Version: 3.0.25

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25
Oracle » Mysql Enterprise Monitor » Version: 3.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0
Oracle » Mysql Enterprise Monitor » Version: 3.1.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1
Oracle » Mysql Enterprise Monitor » Version: 3.1.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2
Oracle » Mysql Enterprise Monitor » Version: 3.1.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3
Oracle » Mysql Enterprise Monitor » Version: 3.1.3.7856

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856
Oracle » Mysql Enterprise Monitor » Version: 3.1.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5
Oracle » Mysql Enterprise Monitor » Version: 3.1.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6
Oracle » Mysql Enterprise Monitor » Version: 3.1.6.8003

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003
Oracle » Mysql Enterprise Monitor » Version: 3.1.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0
Oracle » Mysql Enterprise Monitor » Version: 3.2.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1
Oracle » Mysql Enterprise Monitor » Version: 3.2.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10
Oracle » Mysql Enterprise Monitor » Version: 3.2.1182

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182
Oracle » Mysql Enterprise Monitor » Version: 3.2.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2
Oracle » Mysql Enterprise Monitor » Version: 3.2.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3
Oracle » Mysql Enterprise Monitor » Version: 3.2.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4
Oracle » Mysql Enterprise Monitor » Version: 3.2.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5
Oracle » Mysql Enterprise Monitor » Version: 3.2.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6
Oracle » Mysql Enterprise Monitor » Version: 3.2.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8
Oracle » Mysql Enterprise Monitor » Version: 3.2.8.2223

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223
Oracle » Mysql Enterprise Monitor » Version: 3.2.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9
Oracle » Mysql Enterprise Monitor » Version: 3.3.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0
Oracle » Mysql Enterprise Monitor » Version: 3.3.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1
Oracle » Mysql Enterprise Monitor » Version: 3.3.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2
Oracle » Mysql Enterprise Monitor » Version: 3.3.2.1162

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162
Oracle » Mysql Enterprise Monitor » Version: 3.3.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3
Oracle » Mysql Enterprise Monitor » Version: 3.3.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4
Oracle » Mysql Enterprise Monitor » Version: 3.3.4.3247

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247
Oracle » Mysql Enterprise Monitor » Version: 3.3.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5
Oracle » Mysql Enterprise Monitor » Version: 3.3.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6
Oracle » Mysql Enterprise Monitor » Version: 3.3.6.3293

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6.3293
Oracle » Mysql Enterprise Monitor » Version: 3.3.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7
Oracle » Mysql Enterprise Monitor » Version: 3.3.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8
Oracle » Mysql Enterprise Monitor » Version: 3.3.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0
Oracle » Mysql Enterprise Monitor » Version: 3.4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1
Oracle » Mysql Enterprise Monitor » Version: 3.4.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10
Oracle » Mysql Enterprise Monitor » Version: 3.4.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2
Oracle » Mysql Enterprise Monitor » Version: 3.4.2.4181

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181
Oracle » Mysql Enterprise Monitor » Version: 3.4.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3
Oracle » Mysql Enterprise Monitor » Version: 3.4.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4
Oracle » Mysql Enterprise Monitor » Version: 3.4.4.4226

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4.4226
Oracle » Mysql Enterprise Monitor » Version: 3.4.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5
Oracle » Mysql Enterprise Monitor » Version: 3.4.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6
Oracle » Mysql Enterprise Monitor » Version: 3.4.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7
Oracle » Mysql Enterprise Monitor » Version: 3.4.7.4297

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297
Oracle » Mysql Enterprise Monitor » Version: 3.4.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8
Oracle » Mysql Enterprise Monitor » Version: 3.4.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.9.4237

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237
Oracle » Mysql Enterprise Monitor » Version: 4.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0
Oracle » Mysql Enterprise Monitor » Version: 4.0.0.5135

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0.5135
Oracle » Mysql Enterprise Monitor » Version: 4.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1
Oracle » Mysql Enterprise Monitor » Version: 4.0.11.5331

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.11.5331
Oracle » Mysql Enterprise Monitor » Version: 4.0.12

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12
Oracle » Mysql Enterprise Monitor » Version: 4.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2
Oracle » Mysql Enterprise Monitor » Version: 4.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3
Oracle » Mysql Enterprise Monitor » Version: 4.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4
Oracle » Mysql Enterprise Monitor » Version: 4.0.4.5235

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235
Oracle » Mysql Enterprise Monitor » Version: 4.0.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5
Oracle » Mysql Enterprise Monitor » Version: 4.0.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6
Oracle » Mysql Enterprise Monitor » Version: 4.0.6.5281

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281
Oracle » Mysql Enterprise Monitor » Version: 4.0.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7
Oracle » Mysql Enterprise Monitor » Version: 4.0.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8
Oracle » Mysql Enterprise Monitor » Version: 4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0
Oracle » Mysql Enterprise Monitor » Version: 8.0.0.8131

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131
Oracle » Mysql Enterprise Monitor » Version: 8.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14
Oracle » Mysql Enterprise Monitor » Version: 8.0.18.1217

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.18.1217
Oracle » Mysql Enterprise Monitor » Version: 8.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2
Oracle » Mysql Enterprise Monitor » Version: 8.0.2.8191

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191
Oracle » Mysql Enterprise Monitor » Version: 8.0.20

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20
Oracle » Mysql Enterprise Monitor » Version: 8.0.21

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.21
Oracle » Mysql Enterprise Monitor » Version: 8.0.22

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.22
Oracle » Mysql Enterprise Monitor » Version: 8.0.23

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23
Oracle » Mysql Enterprise Monitor » Version: 8.0.25

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.25
Oracle » Mysql Enterprise Monitor » Version: 8.0.29

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.29
Oracle » Mysql Enterprise Monitor » Version: 8.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23181

Products

Pricing

Contact Us