Description 默认安装的tomcat在首页会自动生成默认页面,默认页面可能泄露与apache版本相关的敏感信息与apachemanager后台地址信息。攻击者可能利用该信息对网站进行渗透攻击。
Related VulnerabilitiesPoCCVE-2026-50229: Apache Tomcat - Cross-Site ScriptingPoCCVE-2026-34486: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code ExecutionPoCCVE-2023-45648: Apache Tomcat - HTTP Request SmugglingPoCCVE-2022-34305: Apache Tomcat Examples Web Application - Cross-Site ScriptingApache Tomcat URL重写绕过漏洞 (CVE-2025-55752)Apache Tomcat 存在路径遍历漏洞(CVE-2025-55752)CVE-2025-24813 Apache Tomcat 远程代码执行漏洞tomcat-default-login: Apahce Tomcat Manager Default LoginPoCCVE-2020-13935: Apache Tomcat WebSocket Frame Payload Length Validation Denial of ServicePoCCVE-2000-0760: Jakarta Tomcat 3.1 and 3.0 - Information DisclosurePoCCVE-2007-2449: Apache Tomcat 4.x-7.x - Cross-Site ScriptingCVE-2016-8735: Apache Tomcat - Remote Code Execution via JMX Ports