Get real-time updates on Telegram
CVE-2012-5568: tomcat from 7.0.0 (inclusive), through 7.0.105 (inclusive); +2 more affected products
CVE-2012-5568. CVSS 2.0 base score 5.0 (MEDIUM, NVD). EPSS 0.09588 (percentile 0.95363), scored 2026-10-08.
Affected technology
tomcat · from 7.0.0 (inclusive), through 7.0.105 (inclusive)
apache
opensuse · 11.4
opensuse
opensuse · 12.1
opensuse
opensuse · 12.2
opensuse
n/a · n/a
Vendor not specified by the source
Description’s affected range: through 7.0.x
Component: Not specified by the source
Attack conditions (NVD, CVSS 2.0): Network (remote)
What an attacker can do
Remote attackers can cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. NVD’s CVSS 2.0 assessment (base score 5.0/10) rates confidentiality and integrity impact as none; availability impact as partial.
- CCR priority
- 22.4 /100 (P4)
- CVSS 2.0
- 5.0 /10 · CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P · NVD
- EPSS
- 0.09588 · percentile 0.95368 · 2026-10-09
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-09 21:11:27.988868+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-09 21:08:49.498434+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2012-5568.html