CVE-2020-13943
- Source
- https://cve.org/CVERecord?id=CVE-2020-13943
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13943.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-13943
- Aliases
- Downstream
CLSA (1)
MGASA (1)
openSUSE (4)
RHSA (1)
- Related
- Published
- 2020-10-12T14:15:12Z
- Modified
- 2026-10-16T02:49:24Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "9.0" }, { "last_affected": "9.0" }, { "introduced": "10.0" }, { "last_affected": "10.0" } ], "source": "CPE_STRING" } ], "vendor_product": "debian:debian_linux" }, { "cpes": [ "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "17.1" }, { "last_affected": "17.1" }, { "introduced": "17.2" }, { "last_affected": "17.2" }, { "introduced": "17.3" }, { "last_affected": "17.3" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:instantis_enterprisetrack" }, { "cpes": [ "cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "9.0" }, { "last_affected": "9.0" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:sd-wan_edge" } ] }- References
-
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html
- https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html
- https://security.netapp.com/advisory/ntap-20201016-0007/
- https://www.debian.org/security/2021/dsa-4835
- https://www.oracle.com/security-alerts/cpuApr2021.html
Affected packages
Git / github.com/apache/tomcat
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/tomcat
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.0" }, { "last_affected": "8.5.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.1" }, { "last_affected": "8.5.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.2" }, { "last_affected": "8.5.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.3" }, { "last_affected": "8.5.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.4" }, { "last_affected": "8.5.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.5" }, { "last_affected": "8.5.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.6" }, { "last_affected": "8.5.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.7" }, { "last_affected": "8.5.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.8" }, { "last_affected": "8.5.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.9" }, { "last_affected": "8.5.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.10" }, { "last_affected": "8.5.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.11" }, { "last_affected": "8.5.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.12" }, { "last_affected": "8.5.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.13" }, { "last_affected": "8.5.13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.14" }, { "last_affected": "8.5.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.15" }, { "last_affected": "8.5.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.16" }, { "last_affected": "8.5.16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.17" }, { "last_affected": "8.5.17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.18" }, { "last_affected": "8.5.18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.19" }, { "last_affected": "8.5.19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.20" }, { "last_affected": "8.5.20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.21" }, { "last_affected": "8.5.21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.22" }, { "last_affected": "8.5.22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.23" }, { "last_affected": "8.5.23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.24" }, { "last_affected": "8.5.24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.25" }, { "last_affected": "8.5.25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.26" }, { "last_affected": "8.5.26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.27" }, { "last_affected": "8.5.27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.28" }, { "last_affected": "8.5.28" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.29" }, { "last_affected": "8.5.29" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.30" }, { "last_affected": "8.5.30" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.31" }, { "last_affected": "8.5.31" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.32" }, { "last_affected": "8.5.32" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.33" }, { "last_affected": "8.5.33" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.34" }, { "last_affected": "8.5.34" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.35" }, { "last_affected": "8.5.35" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.36" }, { "last_affected": "8.5.36" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.37" }, { "last_affected": "8.5.37" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.38" }, { "last_affected": "8.5.38" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.39" }, { "last_affected": "8.5.39" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.40" }, { "last_affected": "8.5.40" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.41" }, { "last_affected": "8.5.41" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.42" }, { "last_affected": "8.5.42" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.43" }, { "last_affected": "8.5.43" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.44" }, { "last_affected": "8.5.44" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.45" }, { "last_affected": "8.5.45" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.46" }, { "last_affected": "8.5.46" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.47" }, { "last_affected": "8.5.47" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.48" }, { "last_affected": "8.5.48" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.49" }, { "last_affected": "8.5.49" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.50" }, { "last_affected": "8.5.50" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.51:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.51" }, { "last_affected": "8.5.51" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.52:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.52" }, { "last_affected": "8.5.52" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.53:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.53" }, { "last_affected": "8.5.53" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.54:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.54" }, { "last_affected": "8.5.54" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.55:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.55" }, { "last_affected": "8.5.55" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.56:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.56" }, { "last_affected": "8.5.56" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:8.5.57:*:*:*:*:*:*:*", "range": [ { "introduced": "8.5.57" }, { "last_affected": "8.5.57" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone10" }, { "last_affected": "9.0.0-milestone10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone11" }, { "last_affected": "9.0.0-milestone11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone12" }, { "last_affected": "9.0.0-milestone12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone13" }, { "last_affected": "9.0.0-milestone13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone14" }, { "last_affected": "9.0.0-milestone14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone15" }, { "last_affected": "9.0.0-milestone15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone16" }, { "last_affected": "9.0.0-milestone16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone17" }, { "last_affected": "9.0.0-milestone17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone18" }, { "last_affected": "9.0.0-milestone18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone19" }, { "last_affected": "9.0.0-milestone19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone20" }, { "last_affected": "9.0.0-milestone20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone21" }, { "last_affected": "9.0.0-milestone21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone22" }, { "last_affected": "9.0.0-milestone22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone23" }, { "last_affected": "9.0.0-milestone23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone24" }, { "last_affected": "9.0.0-milestone24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone25" }, { "last_affected": "9.0.0-milestone25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone26" }, { "last_affected": "9.0.0-milestone26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone27" }, { "last_affected": "9.0.0-milestone27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone5" }, { "last_affected": "9.0.0-milestone5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone6" }, { "last_affected": "9.0.0-milestone6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone7" }, { "last_affected": "9.0.0-milestone7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone8" }, { "last_affected": "9.0.0-milestone8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*", "range": [ { "introduced": "9.0.0-milestone9" }, { "last_affected": "9.0.0-milestone9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.1" }, { "last_affected": "9.0.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.2" }, { "last_affected": "9.0.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.3" }, { "last_affected": "9.0.3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.4" }, { "last_affected": "9.0.4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.5" }, { "last_affected": "9.0.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.6" }, { "last_affected": "9.0.6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.7" }, { "last_affected": "9.0.7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.8" }, { "last_affected": "9.0.8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.9" }, { "last_affected": "9.0.9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.10" }, { "last_affected": "9.0.10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.11" }, { "last_affected": "9.0.11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.12" }, { "last_affected": "9.0.12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.13" }, { "last_affected": "9.0.13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.14" }, { "last_affected": "9.0.14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.15" }, { "last_affected": "9.0.15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.16" }, { "last_affected": "9.0.16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.17" }, { "last_affected": "9.0.17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.18" }, { "last_affected": "9.0.18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.19" }, { "last_affected": "9.0.19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.20" }, { "last_affected": "9.0.20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.21" }, { "last_affected": "9.0.21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.22" }, { "last_affected": "9.0.22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.23" }, { "last_affected": "9.0.23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.24" }, { "last_affected": "9.0.24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.25" }, { "last_affected": "9.0.25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.26" }, { "last_affected": "9.0.26" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.27" }, { "last_affected": "9.0.27" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.28" }, { "last_affected": "9.0.28" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.29" }, { "last_affected": "9.0.29" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.30" }, { "last_affected": "9.0.30" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.31:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.31" }, { "last_affected": "9.0.31" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.32:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.32" }, { "last_affected": "9.0.32" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.33:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.33" }, { "last_affected": "9.0.33" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.34:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.34" }, { "last_affected": "9.0.34" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.35:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.35" }, { "last_affected": "9.0.35" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.36:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.36" }, { "last_affected": "9.0.36" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:9.0.37:*:*:*:*:*:*:*", "range": [ { "introduced": "9.0.37" }, { "last_affected": "9.0.37" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone1" }, { "last_affected": "10.0.0-milestone1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone2" }, { "last_affected": "10.0.0-milestone2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone3" }, { "last_affected": "10.0.0-milestone3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone4" }, { "last_affected": "10.0.0-milestone4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone5" }, { "last_affected": "10.0.0-milestone5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone6" }, { "last_affected": "10.0.0-milestone6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*", "range": [ { "introduced": "10.0.0-milestone7" }, { "last_affected": "10.0.0-milestone7" } ], "source": "CPE_STRING" } ] }
Affected versions
10.*
10.0.0-milestone1
10.0.0-milestone2
10.0.0-milestone3
10.0.0-milestone4
10.0.0-milestone5
10.0.0-milestone6
10.0.0-milestone7
8.*
8.5.0
8.5.1
8.5.10
8.5.11
8.5.12
8.5.13
8.5.14
8.5.15
8.5.16
8.5.17
8.5.18
8.5.19
8.5.2
8.5.20
8.5.21
8.5.22
8.5.23
8.5.24
8.5.25
8.5.26
8.5.27
8.5.28
8.5.29
8.5.3
8.5.30
8.5.31
8.5.32
8.5.33
8.5.34
8.5.35
8.5.36
8.5.37
8.5.38
8.5.39
8.5.4
8.5.40
8.5.41
8.5.42
8.5.43
8.5.44
8.5.45
8.5.46
8.5.47
8.5.48
8.5.49
8.5.5
8.5.50
8.5.51
8.5.52
8.5.53
8.5.54
8.5.55
8.5.56
8.5.57
8.5.6
8.5.7
8.5.8
8.5.9
9.*
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone14
9.0.0-milestone15
9.0.0-milestone16
9.0.0-milestone17
9.0.0-milestone18
9.0.0-milestone19
9.0.0-milestone20
9.0.0-milestone21
9.0.0-milestone22
9.0.0-milestone23
9.0.0-milestone24
9.0.0-milestone25
9.0.0-milestone26
9.0.0-milestone27
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9
9.0.1
9.0.10
9.0.11
9.0.12
9.0.13
9.0.14
9.0.15
9.0.16
9.0.17
9.0.18
9.0.19
9.0.2
9.0.20
9.0.21
9.0.22
9.0.23
9.0.24
9.0.25
9.0.26
9.0.27
9.0.28
9.0.29
9.0.3
9.0.30
9.0.31
9.0.32
9.0.33
9.0.34
9.0.35
9.0.36
9.0.37
9.0.4
9.0.5
9.0.6
9.0.7
9.0.8
9.0.9