The version of Tomcat installed on the remote host is prior to 7.0.94. It is, therefore, affected by multiple vulnerabilities as referenced in the fixed_in_apache_tomcat_7.0.94_security-7 advisory.

  - When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to     9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way     the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option     enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all     versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus     Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-     windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.m     icrosoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-     way/). (CVE-2019-0232)

  - The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes     user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The     printenv command is intended for debugging and is unlikely to be present in a production website.
    (CVE-2019-0221)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Apache Tomcat 7.0.0 < 7.0.94 multiple vulnerabilities

critical Nessus Plugin ID 124064

Version 1.16

Version 1.15

Version 1.13

Version 1.16 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.15 May 23, 2024, 8:37 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202405232037
Version 1.13 Dec 6, 2022, 2:54 AM Reference Plugin Feed: 202212060254