漏洞描述
默认安装的tomcat在首页会自动生成默认页面，默认页面可能泄露与apache版本相关的敏感信息与apachemanager后台地址信息。攻击者可能利用该信息对网站进行渗透攻击。
Tomcat默认页面未删除
PoC代码
暂无相关漏洞推荐
- Apache Tomcat URL重写绕过漏洞 （CVE-2025-55752）
- CVE-2025-24813 Apache Tomcat 远程代码执行漏洞
- tomcat-default-login: Apahce Tomcat Manager Default Login
- POC CVE-2020-13935: Apache Tomcat WebSocket Frame Payload Length Validation Denial of Service
- POC CVE-2000-0760: Jakarta Tomcat 3.1 and 3.0 - Information Disclosure
- POC CVE-2007-2449: Apache Tomcat 4.x-7.x - Cross-Site Scripting
- CVE-2016-8735: Apache Tomcat - Remote Code Execution via JMX Ports
- POC CVE-2017-12615: Apache Tomcat Servers - Remote Code Execution
- POC CVE-2017-12617: Apache Tomcat - Remote Code Execution
- POC CVE-2018-11759: Apache Tomcat JK Connect <=1.2.44 - Manager Access
- POC CVE-2018-11784: Apache Tomcat - Open Redirect
- POC CVE-2019-0221: Apache Tomcat - Cross-Site Scripting
- POC CVE-2019-0232: Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution