CVE-2010-3718

Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attack.

Published: 2011-02-10 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2010-3718 is rated Low Risk (29.5/100): CVSS Low severity, with medium exploitation likelihood (EPSS 1.35%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2010-3718

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.40% 1.35% +0.95%
2 2026-06-13 0.30% 0.40% +0.09%
3 2025-12-27 — 0.30% —

Full EPSS history (7 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2010-3718

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
1.2 2.0 LOW
AV:L/AC:H/Au:N/C:N/I:P/A:N Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
 1.9 2.9 [email protected]

Weakness enumeration for CVE-2010-3718

GitHub Security Advisory for CVE-2010-3718

GHSA-fj6c-prgj-gr3r · Severity: low · Ecosystem: maven — Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

OS Trackers for CVE-2010-3718

vendor priority summary link
gentoo normal CVE-2010-3718: 1 GLSA(s) (201206-24), 1 atom(s) (www-servers/tomcat); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-3718
redhat medium — https://access.redhat.com/security/cve/CVE-2010-3718
ubuntu low CVE-2010-3718 low priority: Ubuntu including 2 source packages (tomcat5.5, tomcat6), 14 status rows across 7 suites (dapper, hardy, karmic, lucid, maverick, natty, upstream): DNE 7, released 4, ignored 1, needs-triage 1, not-affected 1. https://ubuntu.com/security/CVE-2010-3718

Affected software / configurations for CVE-2010-3718

Vendor Product Version Raw CPE
apache tomcat 7.0.0 cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
apache tomcat 7.0.1 cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
apache tomcat 7.0.2 cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
apache tomcat 7.0.3 cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
apache tomcat 6.0 cpe:2.3:a:apache:tomcat:6.0:*:*:*:*:*:*:*
apache tomcat 6.0.0 cpe:2.3:a:apache:tomcat:6.0.0:*:*:*:*:*:*:*
apache tomcat 6.0.1 cpe:2.3:a:apache:tomcat:6.0.1:*:*:*:*:*:*:*
apache tomcat 6.0.2 cpe:2.3:a:apache:tomcat:6.0.2:*:*:*:*:*:*:*
apache tomcat 6.0.3 cpe:2.3:a:apache:tomcat:6.0.3:*:*:*:*:*:*:*
apache tomcat 6.0.4 cpe:2.3:a:apache:tomcat:6.0.4:*:*:*:*:*:*:*
apache tomcat 6.0.5 cpe:2.3:a:apache:tomcat:6.0.5:*:*:*:*:*:*:*
apache tomcat 6.0.6 cpe:2.3:a:apache:tomcat:6.0.6:*:*:*:*:*:*:*
apache tomcat 6.0.7 cpe:2.3:a:apache:tomcat:6.0.7:*:*:*:*:*:*:*
apache tomcat 6.0.8 cpe:2.3:a:apache:tomcat:6.0.8:*:*:*:*:*:*:*
apache tomcat 6.0.9 cpe:2.3:a:apache:tomcat:6.0.9:*:*:*:*:*:*:*
apache tomcat 6.0.10 cpe:2.3:a:apache:tomcat:6.0.10:*:*:*:*:*:*:*
apache tomcat 6.0.11 cpe:2.3:a:apache:tomcat:6.0.11:*:*:*:*:*:*:*
apache tomcat 6.0.12 cpe:2.3:a:apache:tomcat:6.0.12:*:*:*:*:*:*:*
apache tomcat 6.0.13 cpe:2.3:a:apache:tomcat:6.0.13:*:*:*:*:*:*:*
apache tomcat 6.0.14 cpe:2.3:a:apache:tomcat:6.0.14:*:*:*:*:*:*:*
apache tomcat 6.0.15 cpe:2.3:a:apache:tomcat:6.0.15:*:*:*:*:*:*:*
apache tomcat 6.0.16 cpe:2.3:a:apache:tomcat:6.0.16:*:*:*:*:*:*:*
apache tomcat 6.0.17 cpe:2.3:a:apache:tomcat:6.0.17:*:*:*:*:*:*:*
apache tomcat 6.0.18 cpe:2.3:a:apache:tomcat:6.0.18:*:*:*:*:*:*:*
apache tomcat 6.0.19 cpe:2.3:a:apache:tomcat:6.0.19:*:*:*:*:*:*:*
apache tomcat 6.0.20 cpe:2.3:a:apache:tomcat:6.0.20:*:*:*:*:*:*:*
apache tomcat 6.0.24 cpe:2.3:a:apache:tomcat:6.0.24:*:*:*:*:*:*:*
apache tomcat 6.0.26 cpe:2.3:a:apache:tomcat:6.0.26:*:*:*:*:*:*:*
apache tomcat 6.0.27 cpe:2.3:a:apache:tomcat:6.0.27:*:*:*:*:*:*:*
apache tomcat 6.0.28 cpe:2.3:a:apache:tomcat:6.0.28:*:*:*:*:*:*:*
apache tomcat 6.0.29 cpe:2.3:a:apache:tomcat:6.0.29:*:*:*:*:*:*:*
apache tomcat 5.5.0 cpe:2.3:a:apache:tomcat:5.5.0:*:*:*:*:*:*:*
apache tomcat 5.5.1 cpe:2.3:a:apache:tomcat:5.5.1:*:*:*:*:*:*:*
apache tomcat 5.5.2 cpe:2.3:a:apache:tomcat:5.5.2:*:*:*:*:*:*:*
apache tomcat 5.5.3 cpe:2.3:a:apache:tomcat:5.5.3:*:*:*:*:*:*:*
apache tomcat 5.5.4 cpe:2.3:a:apache:tomcat:5.5.4:*:*:*:*:*:*:*
apache tomcat 5.5.5 cpe:2.3:a:apache:tomcat:5.5.5:*:*:*:*:*:*:*
apache tomcat 5.5.6 cpe:2.3:a:apache:tomcat:5.5.6:*:*:*:*:*:*:*
apache tomcat 5.5.7 cpe:2.3:a:apache:tomcat:5.5.7:*:*:*:*:*:*:*
apache tomcat 5.5.8 cpe:2.3:a:apache:tomcat:5.5.8:*:*:*:*:*:*:*
apache tomcat 5.5.9 cpe:2.3:a:apache:tomcat:5.5.9:*:*:*:*:*:*:*
apache tomcat 5.5.10 cpe:2.3:a:apache:tomcat:5.5.10:*:*:*:*:*:*:*
apache tomcat 5.5.11 cpe:2.3:a:apache:tomcat:5.5.11:*:*:*:*:*:*:*
apache tomcat 5.5.12 cpe:2.3:a:apache:tomcat:5.5.12:*:*:*:*:*:*:*
apache tomcat 5.5.13 cpe:2.3:a:apache:tomcat:5.5.13:*:*:*:*:*:*:*
apache tomcat 5.5.14 cpe:2.3:a:apache:tomcat:5.5.14:*:*:*:*:*:*:*
apache tomcat 5.5.15 cpe:2.3:a:apache:tomcat:5.5.15:*:*:*:*:*:*:*
apache tomcat 5.5.16 cpe:2.3:a:apache:tomcat:5.5.16:*:*:*:*:*:*:*
apache tomcat 5.5.17 cpe:2.3:a:apache:tomcat:5.5.17:*:*:*:*:*:*:*
apache tomcat 5.5.18 cpe:2.3:a:apache:tomcat:5.5.18:*:*:*:*:*:*:*
apache tomcat 5.5.19 cpe:2.3:a:apache:tomcat:5.5.19:*:*:*:*:*:*:*
apache tomcat 5.5.20 cpe:2.3:a:apache:tomcat:5.5.20:*:*:*:*:*:*:*
apache tomcat 5.5.21 cpe:2.3:a:apache:tomcat:5.5.21:*:*:*:*:*:*:*
apache tomcat 5.5.22 cpe:2.3:a:apache:tomcat:5.5.22:*:*:*:*:*:*:*
apache tomcat 5.5.23 cpe:2.3:a:apache:tomcat:5.5.23:*:*:*:*:*:*:*
apache tomcat 5.5.24 cpe:2.3:a:apache:tomcat:5.5.24:*:*:*:*:*:*:*
apache tomcat 5.5.25 cpe:2.3:a:apache:tomcat:5.5.25:*:*:*:*:*:*:*
apache tomcat 5.5.26 cpe:2.3:a:apache:tomcat:5.5.26:*:*:*:*:*:*:*
apache tomcat 5.5.27 cpe:2.3:a:apache:tomcat:5.5.27:*:*:*:*:*:*:*
apache tomcat 5.5.28 cpe:2.3:a:apache:tomcat:5.5.28:*:*:*:*:*:*:*
apache tomcat 5.5.29 cpe:2.3:a:apache:tomcat:5.5.29:*:*:*:*:*:*:*
apache tomcat 5.5.30 cpe:2.3:a:apache:tomcat:5.5.30:*:*:*:*:*:*:*
apache tomcat 5.5.32 cpe:2.3:a:apache:tomcat:5.5.32:*:*:*:*:*:*:*

References for CVE-2010-3718

URL Tags
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://marc.info/?l=bugtraq&m=130168502603566&w=2
http://marc.info/?l=bugtraq&m=132215163318824&w=2
http://marc.info/?l=bugtraq&m=136485229118404&w=2
http://marc.info/?l=bugtraq&m=139344343412337&w=2
http://secunia.com/advisories/43192 Vendor Advisory
http://secunia.com/advisories/45022
http://secunia.com/advisories/57126
http://securityreason.com/securityalert/8072
http://support.apple.com/kb/HT5002
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
http://tomcat.apache.org/security-5.html Vendor Advisory
http://tomcat.apache.org/security-6.html Vendor Advisory
http://tomcat.apache.org/security-7.html Vendor Advisory
http://www.debian.org/security/2011/dsa-2160
http://www.mandriva.com/security/advisories?name=MDVSA-2011:030
http://www.redhat.com/support/errata/RHSA-2011-0791.html
http://www.redhat.com/support/errata/RHSA-2011-0896.html
http://www.redhat.com/support/errata/RHSA-2011-0897.html
http://www.redhat.com/support/errata/RHSA-2011-1845.html
http://www.securityfocus.com/archive/1/516211/100/0/threaded
http://www.securityfocus.com/bid/46177
http://www.securitytracker.com/id?1025025
https://exchange.xforce.ibmcloud.com/vulnerabilities/65159
https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12517
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13969
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19379
cvelogic Threat Intelligence