TO
Web Server
Tomcat
by Apache · last CVE Oct 20, 2026
On CISA KEVExploited in the wildRansomware-linked
296
CVEs
7
On KEV
9.8
Max CVSS
8
New 30D
History
CVEs by year
2000
3
2001
4
2002
12
2003
7
2005
8
2006
1
2007
17
2008
9
2009
8
2010
8
2011
14
2012
15
2013
4
2014
13
2015
3
2016
12
2017
22
2018
8
2019
7
2020
10
2021
8
2022
6
2023
11
2024
11
2025
15
2026
60
Recent activity
New CVEs per week
8 new CVEs in the last 30 days.