CVE-2020-13943

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13943
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13943.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-13943
Aliases
Downstream
Related
Published
2020-10-12T14:15:12.183Z
Modified
2026-07-07T08:50:31.592318368Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "debian:debian_linux",
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                },
                {
                    "introduced": "10.0"
                },
                {
                    "last_affected": "10.0"
                }
            ]
        },
        {
            "vendor_product": "oracle:instantis_enterprisetrack",
            "cpes": [
                "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "17.1"
                },
                {
                    "last_affected": "17.1"
                },
                {
                    "introduced": "17.2"
                },
                {
                    "last_affected": "17.2"
                },
                {
                    "introduced": "17.3"
                },
                {
                    "last_affected": "17.3"
                }
            ]
        },
        {
            "vendor_product": "oracle:sd-wan_edge",
            "cpes": [
                "cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/apache/tomcat

Affected ranges

Type
GIT
Repo
https://github.com/apache/tomcat
Events
Introduced
e37b977db6f47e4380ad67114a49e8568951c953
Last affected
c549413165721180b15f62033c1be6c5970028fd
Database specific
Show details 
{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "8.5.0"
        },
        {
            "last_affected": "8.5.0"
        },
        {
            "introduced": "8.5.1"
        },
        {
            "last_affected": "8.5.1"
        },
        {
            "introduced": "8.5.2"
        },
        {
            "last_affected": "8.5.2"
        },
        {
            "introduced": "8.5.3"
        },
        {
            "last_affected": "8.5.3"
        },
        {
            "introduced": "8.5.4"
        },
        {
            "last_affected": "8.5.4"
        },
        {
            "introduced": "8.5.5"
        },
        {
            "last_affected": "8.5.5"
        },
        {
            "introduced": "8.5.6"
        },
        {
            "last_affected": "8.5.6"
        },
        {
            "introduced": "8.5.7"
        },
        {
            "last_affected": "8.5.7"
        },
        {
            "introduced": "8.5.8"
        },
        {
            "last_affected": "8.5.8"
        },
        {
            "introduced": "8.5.9"
        },
        {
            "last_affected": "8.5.9"
        },
        {
            "introduced": "8.5.10"
        },
        {
            "last_affected": "8.5.10"
        },
        {
            "introduced": "8.5.11"
        },
        {
            "last_affected": "8.5.11"
        },
        {
            "introduced": "8.5.12"
        },
        {
            "last_affected": "8.5.12"
        },
        {
            "introduced": "8.5.13"
        },
        {
            "last_affected": "8.5.13"
        },
        {
            "introduced": "8.5.14"
        },
        {
            "last_affected": "8.5.14"
        },
        {
            "introduced": "8.5.15"
        },
        {
            "last_affected": "8.5.15"
        },
        {
            "introduced": "8.5.16"
        },
        {
            "last_affected": "8.5.16"
        },
        {
            "introduced": "8.5.17"
        },
        {
            "last_affected": "8.5.17"
        },
        {
            "introduced": "8.5.18"
        },
        {
            "last_affected": "8.5.18"
        },
        {
            "introduced": "8.5.19"
        },
        {
            "last_affected": "8.5.19"
        },
        {
            "introduced": "8.5.20"
        },
        {
            "last_affected": "8.5.20"
        },
        {
            "introduced": "8.5.21"
        },
        {
            "last_affected": "8.5.21"
        },
        {
            "introduced": "8.5.22"
        },
        {
            "last_affected": "8.5.22"
        },
        {
            "introduced": "8.5.23"
        },
        {
            "last_affected": "8.5.23"
        },
        {
            "introduced": "8.5.24"
        },
        {
            "last_affected": "8.5.24"
        },
        {
            "introduced": "8.5.25"
        },
        {
            "last_affected": "8.5.25"
        },
        {
            "introduced": "8.5.26"
        },
        {
            "last_affected": "8.5.26"
        },
        {
            "introduced": "8.5.27"
        },
        {
            "last_affected": "8.5.27"
        },
        {
            "introduced": "8.5.28"
        },
        {
            "last_affected": "8.5.28"
        },
        {
            "introduced": "8.5.29"
        },
        {
            "last_affected": "8.5.29"
        },
        {
            "introduced": "8.5.30"
        },
        {
            "last_affected": "8.5.30"
        },
        {
            "introduced": "8.5.31"
        },
        {
            "last_affected": "8.5.31"
        },
        {
            "introduced": "8.5.32"
        },
        {
            "last_affected": "8.5.32"
        },
        {
            "introduced": "8.5.33"
        },
        {
            "last_affected": "8.5.33"
        },
        {
            "introduced": "8.5.34"
        },
        {
            "last_affected": "8.5.34"
        },
        {
            "introduced": "8.5.35"
        },
        {
            "last_affected": "8.5.35"
        },
        {
            "introduced": "8.5.36"
        },
        {
            "last_affected": "8.5.36"
        },
        {
            "introduced": "8.5.37"
        },
        {
            "last_affected": "8.5.37"
        },
        {
            "introduced": "8.5.38"
        },
        {
            "last_affected": "8.5.38"
        },
        {
            "introduced": "8.5.39"
        },
        {
            "last_affected": "8.5.39"
        },
        {
            "introduced": "8.5.40"
        },
        {
            "last_affected": "8.5.40"
        },
        {
            "introduced": "8.5.41"
        },
        {
            "last_affected": "8.5.41"
        },
        {
            "introduced": "8.5.42"
        },
        {
            "last_affected": "8.5.42"
        },
        {
            "introduced": "8.5.43"
        },
        {
            "last_affected": "8.5.43"
        },
        {
            "introduced": "8.5.44"
        },
        {
            "last_affected": "8.5.44"
        },
        {
            "introduced": "8.5.45"
        },
        {
            "last_affected": "8.5.45"
        },
        {
            "introduced": "8.5.46"
        },
        {
            "last_affected": "8.5.46"
        },
        {
            "introduced": "8.5.47"
        },
        {
            "last_affected": "8.5.47"
        },
        {
            "introduced": "8.5.48"
        },
        {
            "last_affected": "8.5.48"
        },
        {
            "introduced": "8.5.49"
        },
        {
            "last_affected": "8.5.49"
        },
        {
            "introduced": "8.5.50"
        },
        {
            "last_affected": "8.5.50"
        },
        {
            "introduced": "8.5.51"
        },
        {
            "last_affected": "8.5.51"
        },
        {
            "introduced": "8.5.52"
        },
        {
            "last_affected": "8.5.52"
        },
        {
            "introduced": "8.5.53"
        },
        {
            "last_affected": "8.5.53"
        },
        {
            "introduced": "8.5.54"
        },
        {
            "last_affected": "8.5.54"
        },
        {
            "introduced": "8.5.55"
        },
        {
            "last_affected": "8.5.55"
        },
        {
            "introduced": "8.5.56"
        },
        {
            "last_affected": "8.5.56"
        },
        {
            "introduced": "8.5.57"
        },
        {
            "last_affected": "8.5.57"
        },
        {
            "introduced": "9.0.0-milestone10"
        },
        {
            "last_affected": "9.0.0-milestone10"
        },
        {
            "introduced": "9.0.0-milestone11"
        },
        {
            "last_affected": "9.0.0-milestone11"
        },
        {
            "introduced": "9.0.0-milestone12"
        },
        {
            "last_affected": "9.0.0-milestone12"
        },
        {
            "introduced": "9.0.0-milestone13"
        },
        {
            "last_affected": "9.0.0-milestone13"
        },
        {
            "introduced": "9.0.0-milestone14"
        },
        {
            "last_affected": "9.0.0-milestone14"
        },
        {
            "introduced": "9.0.0-milestone15"
        },
        {
            "last_affected": "9.0.0-milestone15"
        },
        {
            "introduced": "9.0.0-milestone16"
        },
        {
            "last_affected": "9.0.0-milestone16"
        },
        {
            "introduced": "9.0.0-milestone17"
        },
        {
            "last_affected": "9.0.0-milestone17"
        },
        {
            "introduced": "9.0.0-milestone18"
        },
        {
            "last_affected": "9.0.0-milestone18"
        },
        {
            "introduced": "9.0.0-milestone19"
        },
        {
            "last_affected": "9.0.0-milestone19"
        },
        {
            "introduced": "9.0.0-milestone20"
        },
        {
            "last_affected": "9.0.0-milestone20"
        },
        {
            "introduced": "9.0.0-milestone21"
        },
        {
            "last_affected": "9.0.0-milestone21"
        },
        {
            "introduced": "9.0.0-milestone22"
        },
        {
            "last_affected": "9.0.0-milestone22"
        },
        {
            "introduced": "9.0.0-milestone23"
        },
        {
            "last_affected": "9.0.0-milestone23"
        },
        {
            "introduced": "9.0.0-milestone24"
        },
        {
            "last_affected": "9.0.0-milestone24"
        },
        {
            "introduced": "9.0.0-milestone25"
        },
        {
            "last_affected": "9.0.0-milestone25"
        },
        {
            "introduced": "9.0.0-milestone26"
        },
        {
            "last_affected": "9.0.0-milestone26"
        },
        {
            "introduced": "9.0.0-milestone27"
        },
        {
            "last_affected": "9.0.0-milestone27"
        },
        {
            "introduced": "9.0.0-milestone5"
        },
        {
            "last_affected": "9.0.0-milestone5"
        },
        {
            "introduced": "9.0.0-milestone6"
        },
        {
            "last_affected": "9.0.0-milestone6"
        },
        {
            "introduced": "9.0.0-milestone7"
        },
        {
            "last_affected": "9.0.0-milestone7"
        },
        {
            "introduced": "9.0.0-milestone8"
        },
        {
            "last_affected": "9.0.0-milestone8"
        },
        {
            "introduced": "9.0.0-milestone9"
        },
        {
            "last_affected": "9.0.0-milestone9"
        },
        {
            "introduced": "9.0.1"
        },
        {
            "last_affected": "9.0.1"
        },
        {
            "introduced": "9.0.2"
        },
        {
            "last_affected": "9.0.2"
        },
        {
            "introduced": "9.0.3"
        },
        {
            "last_affected": "9.0.3"
        },
        {
            "introduced": "9.0.4"
        },
        {
            "last_affected": "9.0.4"
        },
        {
            "introduced": "9.0.5"
        },
        {
            "last_affected": "9.0.5"
        },
        {
            "introduced": "9.0.6"
        },
        {
            "last_affected": "9.0.6"
        },
        {
            "introduced": "9.0.7"
        },
        {
            "last_affected": "9.0.7"
        },
        {
            "introduced": "9.0.8"
        },
        {
            "last_affected": "9.0.8"
        },
        {
            "introduced": "9.0.9"
        },
        {
            "last_affected": "9.0.9"
        },
        {
            "introduced": "9.0.10"
        },
        {
            "last_affected": "9.0.10"
        },
        {
            "introduced": "9.0.11"
        },
        {
            "last_affected": "9.0.11"
        },
        {
            "introduced": "9.0.12"
        },
        {
            "last_affected": "9.0.12"
        },
        {
            "introduced": "9.0.13"
        },
        {
            "last_affected": "9.0.13"
        },
        {
            "introduced": "9.0.14"
        },
        {
            "last_affected": "9.0.14"
        },
        {
            "introduced": "9.0.15"
        },
        {
            "last_affected": "9.0.15"
        },
        {
            "introduced": "9.0.16"
        },
        {
            "last_affected": "9.0.16"
        },
        {
            "introduced": "9.0.17"
        },
        {
            "last_affected": "9.0.17"
        },
        {
            "introduced": "9.0.18"
        },
        {
            "last_affected": "9.0.18"
        },
        {
            "introduced": "9.0.19"
        },
        {
            "last_affected": "9.0.19"
        },
        {
            "introduced": "9.0.20"
        },
        {
            "last_affected": "9.0.20"
        },
        {
            "introduced": "9.0.21"
        },
        {
            "last_affected": "9.0.21"
        },
        {
            "introduced": "9.0.22"
        },
        {
            "last_affected": "9.0.22"
        },
        {
            "introduced": "9.0.23"
        },
        {
            "last_affected": "9.0.23"
        },
        {
            "introduced": "9.0.24"
        },
        {
            "last_affected": "9.0.24"
        },
        {
            "introduced": "9.0.25"
        },
        {
            "last_affected": "9.0.25"
        },
        {
            "introduced": "9.0.26"
        },
        {
            "last_affected": "9.0.26"
        },
        {
            "introduced": "9.0.27"
        },
        {
            "last_affected": "9.0.27"
        },
        {
            "introduced": "9.0.28"
        },
        {
            "last_affected": "9.0.28"
        },
        {
            "introduced": "9.0.29"
        },
        {
            "last_affected": "9.0.29"
        },
        {
            "introduced": "9.0.30"
        },
        {
            "last_affected": "9.0.30"
        },
        {
            "introduced": "9.0.31"
        },
        {
            "last_affected": "9.0.31"
        },
        {
            "introduced": "9.0.32"
        },
        {
            "last_affected": "9.0.32"
        },
        {
            "introduced": "9.0.33"
        },
        {
            "last_affected": "9.0.33"
        },
        {
            "introduced": "9.0.34"
        },
        {
            "last_affected": "9.0.34"
        },
        {
            "introduced": "9.0.35"
        },
        {
            "last_affected": "9.0.35"
        },
        {
            "introduced": "9.0.36"
        },
        {
            "last_affected": "9.0.36"
        },
        {
            "introduced": "9.0.37"
        },
        {
            "last_affected": "9.0.37"
        },
        {
            "introduced": "10.0.0-milestone1"
        },
        {
            "last_affected": "10.0.0-milestone1"
        },
        {
            "introduced": "10.0.0-milestone2"
        },
        {
            "last_affected": "10.0.0-milestone2"
        },
        {
            "introduced": "10.0.0-milestone3"
        },
        {
            "last_affected": "10.0.0-milestone3"
        },
        {
            "introduced": "10.0.0-milestone4"
        },
        {
            "last_affected": "10.0.0-milestone4"
        },
        {
            "introduced": "10.0.0-milestone5"
        },
        {
            "last_affected": "10.0.0-milestone5"
        },
        {
            "introduced": "10.0.0-milestone6"
        },
        {
            "last_affected": "10.0.0-milestone6"
        },
        {
            "introduced": "10.0.0-milestone7"
        },
        {
            "last_affected": "10.0.0-milestone7"
        }
    ],
    "cpe": [
        "cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.51:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.52:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.53:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.54:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.55:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.56:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:8.5.57:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.31:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.32:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.33:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.34:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.35:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.36:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:9.0.37:*:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*",
        "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*"
    ]
}

Affected versions

10.*
10.0.0-milestone1
10.0.0-milestone2
10.0.0-milestone3
10.0.0-milestone4
10.0.0-milestone5
10.0.0-milestone6
10.0.0-milestone7
8.*
8.5.0
8.5.1
8.5.10
8.5.11
8.5.12
8.5.13
8.5.14
8.5.15
8.5.16
8.5.17
8.5.18
8.5.19
8.5.2
8.5.20
8.5.21
8.5.22
8.5.23
8.5.24
8.5.25
8.5.26
8.5.27
8.5.28
8.5.29
8.5.3
8.5.30
8.5.31
8.5.32
8.5.33
8.5.34
8.5.35
8.5.36
8.5.37
8.5.38
8.5.39
8.5.4
8.5.40
8.5.41
8.5.42
8.5.43
8.5.44
8.5.45
8.5.46
8.5.47
8.5.48
8.5.49
8.5.5
8.5.50
8.5.51
8.5.52
8.5.53
8.5.54
8.5.55
8.5.56
8.5.57
8.5.6
8.5.7
8.5.8
8.5.9
9.*
9.0.0-milestone10
9.0.0-milestone11
9.0.0-milestone12
9.0.0-milestone13
9.0.0-milestone14
9.0.0-milestone15
9.0.0-milestone16
9.0.0-milestone17
9.0.0-milestone18
9.0.0-milestone19
9.0.0-milestone20
9.0.0-milestone21
9.0.0-milestone22
9.0.0-milestone23
9.0.0-milestone24
9.0.0-milestone25
9.0.0-milestone26
9.0.0-milestone27
9.0.0-milestone5
9.0.0-milestone6
9.0.0-milestone7
9.0.0-milestone8
9.0.0-milestone9
9.0.1
9.0.10
9.0.11
9.0.12
9.0.13
9.0.14
9.0.15
9.0.16
9.0.17
9.0.18
9.0.19
9.0.2
9.0.20
9.0.21
9.0.22
9.0.23
9.0.24
9.0.25
9.0.26
9.0.27
9.0.28
9.0.29
9.0.3
9.0.30
9.0.31
9.0.32
9.0.33
9.0.34
9.0.35
9.0.36
9.0.37
9.0.4
9.0.5
9.0.6
9.0.7
9.0.8
9.0.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-13943.json"