SecAlerts
CVE ListPricingSign Up
tornado logo

tornado

Security Risk Profile

32
/100
low

Security Risk Score

Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 28, 2008 to present

4
Total CVEs
3
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
32/100
low

Severity Distribution

Critical
0
High
3
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
XSS
1

Most Affected Products

1. Tornado Tornado3
2. IBM Watson Studio on Cloud Pak for Data2
3. pip/tornado1
4. tornadoweb tornado1
5. Debian Debian Linux1

Recent Vulnerabilities

See more →
REDHAT-BUG-2366703
CVSS 7.0high
5/15/2025🔧 No Patch
CVE-2025-47287
CVSS 7.5EPSS 0%high

Tornado vulnerable to excessive logging caused by malformed multipart form data

5/15/2025
REDHAT-BUG-2328045
CVSS 7.0high
11/22/2024🔧 No Patch
CVE-2008-5264
CVSS 4.3medium
11/28/2008🔧 No Patch

Monitor tornado in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.

tornado Security Vulnerabilities & Risk Score | 4 CVEs | SecAlerts - SecAlerts