Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-11784

83
FAUCET Score

CVE-2018-11784 is an open redirect vulnerability affecting Apache Tomcat versions 7.0.23-7.0.90, 8.5.0-8.5.33, and 9.0.0.M1-9.0.11. An attacker can craft a malicious URL that, when processed by Tomcat's default servlet during a directory redirect, forces the user's browser to an arbitrary URI of the attacker's choosing. This medium severity vulnerability (CVSS 4.3) requires user interaction and primarily impacts integrity, as it can be used for phishing or other social engineering attacks. While not listed on CISA's KEV catalog or the Hot List, public exploit code exists, including Nuclei templates and an ExploitDB entry, though there is minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 7.0.23, <= 7.0.90CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
>= 8.5.0, <= 8.5.33CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
>= 9.0.1, <= 9.0.11CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:9.0.0:*:*:*:*:*:*:*
9.0.0CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

4.3MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
94.49%
Probability of exploitation in next 30 days
EPSS Percentile
99.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Nuclei: CVE-2018-11784 · Mar 18, 2021
ExploitDB: EDB-50118 · Jul 13, 2021
This CVE's current EPSS score of 0.9449 is in the 100th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (20)

mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 8.5.34
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 7.0.91
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 9.0.12
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: tomcat-0:7.0.76-9.el7_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: pki-deps:10.6-8000020190524054914.55190bc5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3.1Fixed in: tomcat
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.70-31.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.36-35.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-native-0:1.2.17-18.redhat_18.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-31.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-35.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.17-18.redhat_18.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.0 on RHEL 6Fixed in: jws5-tomcat-0:9.0.7-12.redhat_12.1.el6jws
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 5.0 on RHEL 7Fixed in: jws5-tomcat-0:9.0.7-12.redhat_12.1.el7jws
View patch
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: jbossweb
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Web Server 2Fixed in: tomcat7
redhatend of lifevia redhat_api
Product: Red Hat JBoss Operations Network 3Fixed in: jbossweb
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Application RuntimesFixed in: tomcat

Vendor Advisories (2)

mavenGHSA-5q99-f34m-67gcmedium

Apache Tomcat Open Redirect vulnerability

Oct 17, 2018
redhatCVE-2018-11784Moderate

tomcat: Open redirect in default servlet

Oct 3, 2018

References

lists.opensuse.org / opensuse-security-announce/2019-06/msg00030.html
lists.opensuse.org / opensuse-security-announce/2019-07/msg00056.html
packetstormsecurity.com / files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html
access.redhat.com / errata/RHSA-2019:0130
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0131
Third Party Advisory
access.redhat.com / errata/RHSA-2019:0485
Third Party Advisory
access.redhat.com / errata/RHSA-2019:1529
kc.mcafee.com / corporate/index
lists.apache.org / thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/23134c9b5a23892a205dc140cdd8c9c0add233600f76b313dda6bd75%40%3Cannounce.tomcat.apache.org%3E
lists.apache.org / thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E
lists.debian.org / debian-lts-announce/2018/10/msg00005.html
Third Party Advisory
lists.debian.org / debian-lts-announce/2018/10/msg00006.html
Third Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/BZ4PX4B3QTKRM35VJAVIEOPZAF76RPBP
seclists.org / bugtraq/2019/Dec/43
security.netapp.com / advisory/ntap-20181014-0002
Third Party Advisory
usn.ubuntu.com / 3787-1
Third Party Advisory
debian.org / security/2019/dsa-4596
oracle.com / security-alerts/cpuapr2020.html
oracle.com / security-alerts/cpujan2020.html
oracle.com / technetwork/security-advisory/cpuapr2019-5072813.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpujan2019-5072801.html
PatchThird Party Advisory
oracle.com / technetwork/security-advisory/cpujul2019-5072835.html
oracle.com / technetwork/security-advisory/cpuoct2019-5072832.html
securityfocus.com / bid/105524
Third Party AdvisoryVDB Entry