Vulnerability in Apache Tomcat

CVE-2005-3510

Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

EPSS: 0.060 (92.5th percentile) — read the EPSS interpretation.

Affected products

  • Apache Tomcat — versions 5.5.0, 5.5.1, 5.5.2
  • N/a — versions n/a

References