{"id":"CVE-2016-8735","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-8735","generatedAt":"2026-10-28T20:06:31.044Z","title":"Apache Tomcat Remote Code Execution Vulnerability","description":"Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","published":"2017-04-06T21:59:00.000Z","lastModified":"2026-08-25T16:28:27.000Z","status":"Analyzed","sourceIdentifier":"security@apache.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["apache/tomcat","canonical/ubuntu linux","netapp/7-mode transition tool","netapp/oncommand insight","netapp/oncommand shift","netapp/snap creator framework","debian/debian linux","redhat/jboss enterprise web server","oracle/agile engineering data management","oracle/agile product lifecycle management","oracle/communications application session controller","oracle/communications instant messaging server","oracle/communications interactive session recorder","oracle/hospitality guest access","oracle/micros relate crm software","oracle/micros retail xbri loss prevention","oracle/mysql enterprise monitor","oracle/retail convenience and fuel pos software","oracle/transportation management"],"epss":{"score":0.90338,"percentile":0.99797,"date":"2026-10-27","history":[]},"kev":{"listed":true,"dateAdded":"2023-05-12","dueDate":"2023-06-02","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://tomcat.apache.org/security-9.html; https://nvd.nist.gov/vuln/detail/CVE-2016-8735"},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 2 June 2023). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0457.html","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"http://seclists.org/oss-sec/2016/q4/502","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767644","tags":["Broken Link","Patch"],"source":"security@apache.org"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767656","tags":["Broken Link","Patch"],"source":"security@apache.org"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767676","tags":["Broken Link","Patch"],"source":"security@apache.org"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767684","tags":["Broken Link","Patch"],"source":"security@apache.org"},{"url":"http://tomcat.apache.org/security-6.html","tags":["Release Notes","Vendor Advisory"],"source":"security@apache.org"},{"url":"http://tomcat.apache.org/security-7.html","tags":["Release Notes","Vendor Advisory"],"source":"security@apache.org"},{"url":"http://tomcat.apache.org/security-8.html","tags":["Release Notes","Vendor Advisory"],"source":"security@apache.org"},{"url":"http://tomcat.apache.org/security-9.html","tags":["Release Notes","Vendor Advisory"],"source":"security@apache.org"},{"url":"http://www.debian.org/security/2016/dsa-3738","tags":["Mailing List","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.securityfocus.com/bid/94463","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"http://www.securitytracker.com/id/1037331","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:0455","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:0456","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://security.netapp.com/advisory/ntap-20180607-0001/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://usn.ubuntu.com/4557-1/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0457.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/oss-sec/2016/q4/502","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767644","tags":["Broken Link","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767656","tags":["Broken Link","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767676","tags":["Broken Link","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=revision&revision=1767684","tags":["Broken Link","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-6.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-7.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-8.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-9.html","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3738","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/94463","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037331","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0455","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0456","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-8735","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}