CVE-2011-4858 CVE-2011-4858

漏洞描述

Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

影响产品

阿帕奇Apache Tomcat查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2026-50229 Apache Tomcat - Cross-Site Scripting Apache Tomcat	中危	—	—	PoCEXP	2026/07/19
CVE-2026-34486RCE Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution Apache Tomcat	严重	—	—	PoCEXP	2026/06/25
CVE-2023-45648 Apache Tomcat - HTTP Request Smuggling Apache Tomcat	中危	—	—	PoCEXP	2026/02/26
tomcat_scripts Apache Tomcat Example Scripts - Detect Apache Tomcat	低危	—	—	PoCEXP	2026/01/12
jkstatus_manager JK Status Manager - Detect Apache Tomcat	低危	—	—	PoCEXP	2026/01/12
tomcat_snoop_servlet_exposed Apache Tomcat - Snoop Servlet Information Disclosure Apache Tomcat	低危	—	—	PoCEXP	2025/11/20

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞