CVE-2002-2272

HIGH · CVSS 7.8 EPSS 9.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2002-2272

Severity

HIGH

CVSS

7.8

EPSS

9.68%

Apache

Original Filing — NVD Description

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.