AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-54677

MEDIUM · CVSS 5.3 EPSS 1.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-17 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.3. It affects Apache. It may lead to a denial-of-service condition.

CVE
CVE-2024-54677
Severity
MEDIUM
CVSS
5.3
EPSS
1.95%
Apache

Original NVD Description

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)