[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fctkJLK-8LmuDftCEc8SrT3j3OIfQxWhv27nVbO3hRng":3,"g5a-risk:CVE-2020-11969":152},{"success":4,"data":5,"meta":150},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":55,"references":56,"referencesCount":80,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":91,"cisaInfo":27,"otxData":27,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":148,"notableEvents":149},"CVE-2020-11969","What is CVE-2020-11969?","If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5.","If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 10...","2020-06-15T20:15:11.147","2023-11-07T03:15:16.28",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.04115,[40,40,40,40,40,40,40],"Critical",[44,49,52],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","tomee","*","cpe:2.3:a:apache:tomee:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"7.0.0","cpe:2.3:a:apache:tomee:7.0.0:m1:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"8.0.0","cpe:2.3:a:apache:tomee:8.0.0:m1:*:*:*:*:*:*",3,[57,63,67,70,74,77],{"url":58,"source":59,"tags":60},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F12\u002F16\u002F2","Openwall",[61,62],"Mailing List","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9%40%3Cdev.tomee.apache.org%3E","Apache",[],{"url":68,"source":65,"tags":69},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cannounce.apache.org%3E",[],{"url":71,"source":65,"tags":72},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbd23418646dedda70a546331ea1c1d115b8975b7e7dc452d10e2e773%40%3Cdev.tomee.apache.org%3E",[61,73],"Vendor Advisory",{"url":75,"source":65,"tags":76},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E",[],{"url":78,"source":65,"tags":79},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cusers.tomee.apache.org%3E",[],6,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",1,false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2020-11969? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-11969, a critical severity cyber security vulnerability from 2020. If Apache TomEE is configured to use the embedded Activ...","CVE-2020-11969, CVE-2020-11969 vulnerability, CVE-2020-11969 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, tomee vulnerability","\u002Fwhat-is\u002Fcve-2020-11969",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-11969","Cybersecurity","CVE-2020-11969, CVE-2020-11969 vulnerability, CVE-2020-11969 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":27,"Negate":27,"Nodes":120},[121],{"Operator":122,"Negate":27,"CPEMatch":123},"OR",[124,128,131,135,138,140,143,146],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":27,"VersionEndIncluding":127},"9836083A-FD7C-4E1B-91B1-7E41933345F1","1.0.0","1.7.5",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":50,"VersionEndExcluding":27,"VersionEndIncluding":130},"55193DEA-47A2-45D1-9A0E-675A6D09C7EB","7.0.7",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":133,"VersionEndExcluding":27,"VersionEndIncluding":134},"7EA64B9D-C9A7-4576-A3E6-872D81EF79E4","7.1.0","7.1.2",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":53,"VersionEndExcluding":27,"VersionEndIncluding":137},"DEA94E5D-827D-45E5-9561-5435564A3086","8.0.1",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CF7BA078-B944-4A03-BC12-2DB95BD474A3",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomee:7.0.0:m2:*:*:*:*:*:*","9E520207-5DC0-4B93-8A66-D9396EB64559",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomee:7.0.0:m3:*:*:*:*:*:*","19027673-1DF2-47D6-90F2-FD59DD2E690B",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AADB1D64-64A7-44C8-B433-550AA6A0E6A8",[],[],{"lastModified":11,"cacheTime":151,"version":33},1792256951429,{"score":153,"band":154,"action":155,"scoredAt":156},54,"Medium","Plan remediation","2026-10-16T06:48:48.212159+00:00"]