CVE-2016-5018Critical· 9.1▾ Midnight

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible t…

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score52/ 100 · Moderate

impact 50.1 · likelihood 2.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 10, 2017

Updated

Oct 8, 2026

CVSS

9.1

Vendor

apache

Product

tomcat

CWE

—

Depth score

52 · Moderate

EPSS

10% · p96

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 3346 days

Aug 10, 2017Published
Disclosed via NVD
Oct 8, 2026Record revised
Last analysed / modified upstream
Oct 8, 2026EPSS first tracked
10%

apache #nvd

Affected

tomcat >= 6.0.0, <= 6.0.45
tomcat >= 7.0.0, <= 7.0.70
tomcat >= 8.0, <= 8.0.36
tomcat >= 8.5.0, <= 8.5.4
tomcat = 9.0.0
oncommand_insight
oncommand_shift
snap_creator_framework
ubuntu_linux = 16.04
debian_linux = 8.0
jboss_enterprise_application_platform = 6.4
jboss_enterprise_web_server = 3.0.0
enterprise_linux_desktop = 7.0
enterprise_linux_eus = 7.4
enterprise_linux_eus = 7.5
enterprise_linux_eus = 7.6
enterprise_linux_eus = 7.7
enterprise_linux_server = 7.0
enterprise_linux_server_aus = 7.4
enterprise_linux_server_aus = 7.6
enterprise_linux_server_aus = 7.7
enterprise_linux_server_tus = 7.6
enterprise_linux_server_tus = 7.7
enterprise_linux_workstation = 7.0
tekelec_platform_distribution >= 7.4.0, <= 7.7.1

Full technical detail▾

Overview

Affected

tomcat >= 6.0.0, <= 6.0.45
tomcat >= 7.0.0, <= 7.0.70
tomcat >= 8.0, <= 8.0.36
tomcat >= 8.5.0, <= 8.5.4
tomcat = 9.0.0
oncommand_insight
oncommand_shift
snap_creator_framework
ubuntu_linux = 16.04
debian_linux = 8.0
jboss_enterprise_application_platform = 6.4
jboss_enterprise_web_server = 3.0.0
enterprise_linux_desktop = 7.0
enterprise_linux_eus = 7.4
enterprise_linux_eus = 7.5
enterprise_linux_eus = 7.6
enterprise_linux_eus = 7.7
enterprise_linux_server = 7.0
enterprise_linux_server_aus = 7.4
enterprise_linux_server_aus = 7.6
enterprise_linux_server_aus = 7.7
enterprise_linux_server_tus = 7.6
enterprise_linux_server_tus = 7.7
enterprise_linux_workstation = 7.0
tekelec_platform_distribution >= 7.4.0, <= 7.7.1

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd