References https://www.ddpoc.com/DVB-2021-2397.html https://www.ddpoc.com/DVB-2021-2398.html https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/Coremail%20%E8%B7%AF%E5%BE%84%E9%81%8D%E5%8E%86%E4%B8%8E%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://wiki.timlzh.com/Qingy-Wiki/Web%E5%AE%89%E5%85%A8/Coremail/Coremail%E9%82%AE%E7%AE%B1%E7%B3%BB%E7%BB%9F%20%E7%9B%AE%E5%BD%95%E7%A9%BF%E8%B6%8A%E6%B3%84%E6%BC%8F%E5%90%8E%E5%8F%B0%E6%BC%8F%E6%B4%9E/Coremail%E9%82%AE%E7%AE%B1%E7%B3%BB%E7%BB%9F%20%E7%9B%AE%E5%BD%95%E7%A9%BF%E8%B6%8A%E6%B3%84%E6%BC%8F%E5%90%8E%E5%8F%B0%E6%BC%8F%E6%B4%9E.html
Related VulnerabilitiesPoCCVE-2026-50229: Apache Tomcat - Cross-Site ScriptingPoCCVE-2026-34486: Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code ExecutionPoCCVE-2023-45648: Apache Tomcat - HTTP Request SmugglingPoCCVE-2022-34305: Apache Tomcat Examples Web Application - Cross-Site ScriptingApache Tomcat URL重写绕过漏洞 (CVE-2025-55752)Apache Tomcat 存在路径遍历漏洞(CVE-2025-55752)CVE-2025-24813 Apache Tomcat 远程代码执行漏洞CNVD-2019-16798: Coremail Information Disclosuretomcat-default-login: Apahce Tomcat Manager Default Logincoremail-manager-password-disclosure: Coremail 邮件系统未授权访问获取管理员账密PoCCVE-2020-13935: Apache Tomcat WebSocket Frame Payload Length Validation Denial of ServicePoCCVE-2000-0760: Jakarta Tomcat 3.1 and 3.0 - Information Disclosure