BO
Product
Bootstrap OS
On CISA KEVExploited in the wildRansomware-linked
57
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 25Low 7
Watch
Add Bootstrap OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24813 In wildKEV | 9.8 | Mar 10 | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT Affected: All versions, or not specified |
| CVE-2024-56337 | 9.8 | Dec 20 | Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete Affected: All versions, or not specified |
| CVE-2024-50379 | 9.8 | Dec 17 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is… Affected: All versions, or not specified |
| CVE-2022-32207 | 9.8 | Jul 7 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final… Affected: All versions, or not specified |
Showing 4