CVE-2014-0227EPSS p97.6%

CVE-2014-0227CVE-2014-0227

apache / tomcat

Description

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.

Scoring

CVSS 6.4 ()
VectorAV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS21.04% probability of exploitation · percentile 97.6% · 2026-10-17T12:00:28Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.