CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Apache. Its EPSS score suggests a 13.9% probability of exploitation in the next 30 days.
CVE
CVE-2014-7810
Severity
MEDIUM
CVSS
5
EPSS
13.87%
Apache
Original NVD Description
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.