{"cve_id":"CVE-2018-11784","published":"2018-10-04T13:29:00.330000+00:00","last_modified":"2026-10-15T18:17:08.530000+00:00","vuln_status":"Modified","description":"When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.","cvss_version":"3.0","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","base_score":4.3,"base_severity":"MEDIUM","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"REQUIRED","scope":"UNCHANGED","impact_c":"NONE","impact_i":"LOW","impact_a":"NONE","cwe_ids":["CWE-601"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.9768,"epss_percentile":0.99903,"cap_rule_version":"0.1.1","stage":"CRED_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":true,"grant_access":"NONE","caps":["CRED_ACCESS","TAMPER"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-28T03:16:54.929943+00:00","first_seen":"2018-10-04T13:29:00.330000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["apache","canonical","debian","netapp","oracle","redhat"],"products":["communications_application_session_controller","debian_linux","enterprise_linux_desktop","enterprise_linux_server","enterprise_linux_server_aus","enterprise_linux_server_eus","enterprise_linux_server_tus","enterprise_linux_workstation","hospitality_guest_access","instantis_enterprisetrack","retail_order_broker","secure_global_desktop","snap_creator_framework","tomcat","ubuntu_linux"],"affected":[{"vendor":"apache","product":"tomcat","ranges":["≥ 8.5.0 and ≤ 8.5.33","≥ 9.0.1 and ≤ 9.0.11","9.0.0","≥ 7.0.23 and ≤ 7.0.90"]},{"vendor":"canonical","product":"ubuntu_linux","ranges":["16.04","14.04"]},{"vendor":"debian","product":"debian_linux","ranges":["8.0"]},{"vendor":"netapp","product":"snap_creator_framework","ranges":["all versions"]},{"vendor":"oracle","product":"communications_application_session_controller","ranges":["3.8.0","3.7.1"]},{"vendor":"oracle","product":"hospitality_guest_access","ranges":["4.2.1","4.2.0"]},{"vendor":"oracle","product":"instantis_enterprisetrack","ranges":["17.3","17.2","17.1"]},{"vendor":"oracle","product":"retail_order_broker","ranges":["5.2","15.0","5.1"]},{"vendor":"oracle","product":"secure_global_desktop","ranges":["5.4"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["7.0"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["7.6","7.0"]},{"vendor":"redhat","product":"enterprise_linux_server_aus","ranges":["7.6"]},{"vendor":"redhat","product":"enterprise_linux_server_eus","ranges":["7.6"]},{"vendor":"redhat","product":"enterprise_linux_server_tus","ranges":["7.6"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["7.0"]}]}