Search for vulnerabilities
Vulnerability details: VCID-11dr-y9we-bya8
Vulnerability ID VCID-11dr-y9we-bya8
Aliases CVE-2013-2071
GHSA-3p5r-7cw3-2m67
Summary
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual LOW http://archives.neohapsis.com/archives/bugtraq/2013-05/0040.html
generic_textual LOW http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105855.html
generic_textual LOW http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105886.html
generic_textual LOW http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106342.html
generic_textual LOW http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html
generic_textual LOW http://marc.info/?l=bugtraq&m=139344248911289&w=2
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
epss 0.06868 https://api.first.org/data/v1/epss?cve=CVE-2013-2071
apache_tomcat Moderate https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2071
cvssv3.1_qr LOW https://github.com/advisories/GHSA-3p5r-7cw3-2m67
generic_textual LOW https://issues.apache.org/bugzilla/show_bug.cgi?id=54178
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2013-2071
generic_textual LOW http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/AsyncContextImpl.java?r1=1471372&r2=1471371&pathrev=1471372
generic_textual LOW http://svn.apache.org/viewvc?view=revision&revision=1471372
generic_textual LOW http://tomcat.apache.org/security-7.html
generic_textual LOW http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
generic_textual LOW http://www.ubuntu.com/usn/USN-1841-1
Reference id Reference type URL
http://archives.neohapsis.com/archives/bugtraq/2013-05/0040.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105855.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105886.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106342.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html
http://marc.info/?l=bugtraq&m=139344248911289&w=2
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2071.json
https://api.first.org/data/v1/epss?cve=CVE-2013-2071
https://issues.apache.org/bugzilla/show_bug.cgi?id=54178
https://nvd.nist.gov/vuln/detail/CVE-2013-2071
https://svn.apache.org/viewvc?view=rev&rev=1471372
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/core/AsyncContextImpl.java?r1=1471372&r2=1471371&pathrev=1471372
http://svn.apache.org/viewvc?view=revision&revision=1471372
http://tomcat.apache.org/security-7.html
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
http://www.ubuntu.com/usn/USN-1841-1
961803 https://bugzilla.redhat.com/show_bug.cgi?id=961803
CVE-2013-2071 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2071
GHSA-3p5r-7cw3-2m67 https://github.com/advisories/GHSA-3p5r-7cw3-2m67
RHSA-2013:1011 https://access.redhat.com/errata/RHSA-2013:1011
RHSA-2013:1012 https://access.redhat.com/errata/RHSA-2013:1012
RHSA-2013:1013 https://access.redhat.com/errata/RHSA-2013:1013
USN-1841-1 https://usn.ubuntu.com/1841-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.90969
EPSS Score 0.06868
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:03:26.089332+00:00 Apache Tomcat Importer Import https://tomcat.apache.org/security-7.html 37.0.0