CVE-2014-7810EPSS p96.5%

CVE-2014-7810CVE-2014-7810

debian / debian_linux

Description

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allows attackers to bypass a SecurityManager protection mechanism via a web application that leverages use of incorrect privileges during EL evaluation.

Scoring

CVSS 5.0 ()
VectorAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS13.87% probability of exploitation · percentile 96.5% · 2026-10-17T12:00:28Z
Last modified2026-10-14
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.