exploit/multi/http/tomcat_mgr_upload
weaponizedApache Tomcat Manager Authenticated Upload Code Execution
01
exploited CVEs (6)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-4094US | medium5.0 | Exploit | ||
The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute… | ||||
| CVE-2010-0557US | high7.5 | Exploit | ||
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials. | ||||
| CVE-2009-4189US | high10.0 | Exploit | ||
HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role… | ||||
| CVE-2009-4188US | high10.0 | Exploit | ||
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager… | ||||
| CVE-2009-3843US | high10.0 | Exploit | ||
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload att… | ||||
| CVE-2009-3548US | high7.5 | Exploit | ||
The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which a… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan