CVE-2005-3510: apache tomcat
Vulnerability summary
CVE-2005-3510 is a medium (CVSS 5.0) vulnerability in apache tomcat. EPSS estimates a 5.95% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities.
Severe, CVSS 8.7 (OSV · Maven); no exploitation reported by the 5 checked sources; EPSS 6% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5Timeline
- 06-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.
CVSS metrics
2 scores · 2 sources · 2 versionsEPSS trend
Probability
5.95%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
No change 0.00 pp
From 5.95% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Apache1 product
- tomcatEOL5.5.0 | 5.5.1 | 5.5.2 | 5.5.3 | 5.5.4 | 5.5.5 | 5.5.6 | 5.5.7 | 5.5.8 | 5.5.9 | 5.5.10 | 5.5.11
Org.apache.tomcat1 product
- tomcat≥ 5.5.0, < 5.5.12
2 vendors · 2 products
References
32 linksShow all 32 references
- github.com/apache/tomcatPACKAGE