CVE-2022-29885

mediumpriority · attend · 66EPSS 0.735 · 99 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

3 exploits · PoC

Likely / severe?

73.5% (99th) EPSS

CVSS 5 · medium

Is it mine?

75 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-26

The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · OSV

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Hsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1112USCWE-400USCWE-400USCWE-400US

exploits (3)

Public proof-of-concept and weaponised exploit code.

EDB-51262Apache Tomcat 10.1 - Denial Of ServicePoC · exploit_db
iveresk/CVE-2022-29885Apache Tomcat DoS (CVE-2022-29885) ExploitPoC · poc_in_github
quynhlab/CVE-2022-29885Apache Tomcat CVE-2022-29885PoC · poc_in_github

affected products (75)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Apache Tomcat <10.0.21all versionscert_bundDE
Apache Tomcat <8.5.79all versionscert_bundDE
Apache Tomcat <9.0.63all versionscert_bundDE
Avaya Aura Application Enablement Servicesall versionscert_bundDEcpe:/a:avaya:aura_application_enablement_services:-
Avaya Aura Experience Portalall versionscert_bundDEcpe:/a:avaya:aura_experience_portal:-
Avaya one-Xall versionscert_bundDEcpe:/a:avaya:one-x:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Data Protection Advisor <19.12all versionscert_bundDE
IBM QRadar SIEM 7.4all versionscert_bundDEcpe:/a:ibm:qradar_siem:7.4
IBM QRadar SIEM 7.5all versionscert_bundDEcpe:/a:ibm:qradar_siem:7.5
IBM Spectrum Protect plus 10.1all versionscert_bundDEcpe:/a:ibm:spectrum_protect:plus_10.1
Oracle Solarisall versionscert_bundDEcpe:/a:oracle:solaris:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Apache Tomcat< 10.0.21cert_bundDE
Apache Tomcat< 8.5.79cert_bundDE
Apache Tomcat< 9.0.63cert_bundDE
Dell Data Protection Advisor< 19.12cert_bundDE
Apache Software Foundation Apache Tomcat≤ Apache Tomcat 9 9.0.13 to 9.0.62enisa_euvdEU
Apache Software Foundation Apache Tomcat≤ Apache Tomcat 8.5 8.5.38 to 8.5.78enisa_euvdEU

showing 20 of 75

advisories (4)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2022-0467Apache Tomcat: Schwachstelle ermöglicht Denial of ServiceDeutsch2022-05-11csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2024-1238HPE HP-UX: Mehrere SchwachstellenDeutsch2024-05-27csaf · cert_bundDE
Ein anonymer oder lokaler Angreifer kann mehrere Schwachstellen in HPE HP-UX Tomcat Servlet Engine ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.
GHSA-r84p-88g2-2vx2Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption2022-05-13ghsa · osvUS
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.
BIT-tomcat-2022-29885EncryptInterceptor does not provide complete protection on insecure networks2024-03-06vendor · osvUS
The documentation of Apache Tomcat 10.1.0 to 10.1.0, 10.0.0 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While the EncryptInterceptor does provide confidentiality and integrity protection, it does not protect against all risks associated with running over any untrusted network, particularly DoS risks.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund NVD CVE.org MITRE

published 2022-05-12modified 2026-06-17

references (27)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan