[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTg-kcZfJ31-cr_zpQmYA7Tb5EjHvFYPyEHMxwOYACiQ":3,"g5a-risk:CVE-2020-17527":425},{"success":4,"data":5,"meta":423},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":127,"references":128,"referencesCount":127,"weaknesses":211,"weaknessesCount":220,"isActivelyExploited":221,"cisaInfo":26,"otxData":26,"relatedBlogPosts":222,"seoMetadata":223,"configurations":248,"relatedVendorCves":414,"notableEvents":415},"CVE-2020-17527","What is CVE-2020-17527?","While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP\u002F2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP\u002F2 connection, it is possible that information could leak between requests.","While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP reques...","2020-12-03T19:15:12.2","2023-11-07T03:19:13.457",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.24622,[39,39,39,39,39,39,39],"High",[43,48,51,54,57,60,63,66,69,72,77,80,85,88,92,96,100,104,108,111,114,117,120,124],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"9.0.0","cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"9.0.35-3.39.1","cpe:2.3:a:apache:tomcat:9.0.35-3.39.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"9.0.35-3.57.3","cpe:2.3:a:apache:tomcat:9.0.35-3.57.3:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"9.0.36","cpe:2.3:a:apache:tomcat:9.0.36:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":61,"criteria":62,"vulnerable":4},"9.0.37","cpe:2.3:a:apache:tomcat:9.0.37:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":64,"criteria":65,"vulnerable":4},"9.0.38","cpe:2.3:a:apache:tomcat:9.0.38:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":67,"criteria":68,"vulnerable":4},"9.0.39","cpe:2.3:a:apache:tomcat:9.0.39:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":70,"criteria":71,"vulnerable":4},"10.0.0","cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",{"vendor":73,"product":74,"version":75,"criteria":76,"vulnerable":4},"netapp","element_plug-in","-","cpe:2.3:a:netapp:element_plug-in:-:*:*:*:*:vcenter_server:*:*",{"vendor":73,"product":78,"version":46,"criteria":79,"vulnerable":4},"oncommand_system_manager","cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":83,"criteria":84,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":86,"criteria":87,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":89,"product":90,"version":46,"criteria":91,"vulnerable":4},"oracle","blockchain_platform","cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*",{"vendor":89,"product":93,"version":94,"criteria":95,"vulnerable":4},"communications_cloud_native_core_binding_support_function","1.10.0","cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*",{"vendor":89,"product":97,"version":98,"criteria":99,"vulnerable":4},"communications_cloud_native_core_policy","1.14.0","cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",{"vendor":89,"product":101,"version":102,"criteria":103,"vulnerable":4},"communications_instant_messaging_server","10.0.1.5.0","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*",{"vendor":89,"product":105,"version":106,"criteria":107,"vulnerable":4},"instantis_enterprisetrack","17.1","cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",{"vendor":89,"product":105,"version":109,"criteria":110,"vulnerable":4},"17.2","cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",{"vendor":89,"product":105,"version":112,"criteria":113,"vulnerable":4},"17.3","cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",{"vendor":89,"product":115,"version":46,"criteria":116,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",{"vendor":89,"product":118,"version":83,"criteria":119,"vulnerable":4},"sd-wan_edge","cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*",{"vendor":89,"product":121,"version":122,"criteria":123,"vulnerable":4},"workload_manager","18c","cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",{"vendor":89,"product":121,"version":125,"criteria":126,"vulnerable":4},"19c","cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",24,[129,135,139,142,145,148,151,154,157,160,163,166,169,172,175,179,182,186,190,194,197,202,205,208],{"url":130,"source":131,"tags":132},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F12\u002F03\u002F3","Openwall",[133,134],"Mailing List","Third Party Advisory",{"url":136,"source":137,"tags":138},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr26a2a66339087fc37db3caf201e446d3e83b5cce314371e235ff1784%40%3Ccommits.tomee.apache.org%3E","Apache",[],{"url":140,"source":137,"tags":141},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr2d6e05c5ff96f8068a59dfdb3800e9ee8d4e36ce1971783c6e5f9b20%40%3Ccommits.tomee.apache.org%3E",[],{"url":143,"source":137,"tags":144},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr5a285242737ddef4d338236328aaaf3237183e1465a5efafd16b99ed%40%3Cdev.tomcat.apache.org%3E",[],{"url":146,"source":137,"tags":147},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8a227ac6a755a6406c1cc47dd48800e973d4cf13fe7fe68ac59c679c%40%3Cdev.tomcat.apache.org%3E",[],{"url":149,"source":137,"tags":150},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9fd47f1b03e9b41d16a5cf72659b533887267d3398d963c2fff3abfa%40%3Ccommits.tomee.apache.org%3E",[],{"url":152,"source":137,"tags":153},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra35c8d617b17d59f400112cebadec43ad379f98198b4a9726190d7ee%40%3Cissues.guacamole.apache.org%3E",[],{"url":155,"source":137,"tags":156},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra9fcdb904dd2e2256ef90b3e4ced279cd464cb0ab63a6c64df5c010d%40%3Cannounce.apache.org%3E",[],{"url":158,"source":137,"tags":159},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra9fcdb904dd2e2256ef90b3e4ced279cd464cb0ab63a6c64df5c010d%40%3Cannounce.tomcat.apache.org%3E",[],{"url":161,"source":137,"tags":162},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fraa0e9ad388c1e6fd1e301b5e080f9439f64cb4178119a86a4801cc53%40%3Cdev.tomcat.apache.org%3E",[],{"url":164,"source":137,"tags":165},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frabbe6b3ae6a9795641d7a05c00d2378d5bbbe4240b7e20f09b092cce%40%3Cissues.guacamole.apache.org%3E",[],{"url":167,"source":137,"tags":168},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frbba08c4dcef3603e36276d49adda8eedbe458c5104314b4038f697e1%40%3Cusers.tomcat.apache.org%3E",[],{"url":170,"source":137,"tags":171},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937%40%3Cdev.tomcat.apache.org%3E",[],{"url":173,"source":137,"tags":174},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frce5ac9a40173651d540babce59f6f3825f12c6d4e886ba00823b11e5%40%3Cannounce.apache.org%3E",[],{"url":176,"source":137,"tags":177},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frce5ac9a40173651d540babce59f6f3825f12c6d4e886ba00823b11e5%40%3Cannounce.tomcat.apache.org%3E",[133,178],"Vendor Advisory",{"url":180,"source":137,"tags":181},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd5babd13d7a350b369b2f647b4dd32ce678af42f9aba5389df1ae6ca%40%3Cusers.tomcat.apache.org%3E",[],{"url":183,"source":184,"tags":185},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F12\u002Fmsg00022.html","Debian",[133,134],{"url":187,"source":188,"tags":189},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202012-23","Gentoo",[134],{"url":191,"source":192,"tags":193},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20201210-0003\u002F","Netapp",[134],{"url":195,"source":184,"tags":196},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4835",[134],{"url":198,"source":199,"tags":200},"https:\u002F\u002Fwww.oracle.com\u002F\u002Fsecurity-alerts\u002Fcpujul2021.html","Oracle",[201,134],"Patch",{"url":203,"source":199,"tags":204},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002FcpuApr2021.html",[201,134],{"url":206,"source":199,"tags":207},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html",[201,134],{"url":209,"source":199,"tags":210},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html",[201,134],[212],{"id":213,"name":214,"description":215,"extendedDescription":216,"status":217,"abstraction":218,"structure":219},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker.  Some kinds of sensitive information include:\nInformation might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected.  These parties include:\nInformation exposures can occur in different ways:\nIt is common practice to describe any loss of confidentiality as an \"information exposure,\" but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read.  CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.","Draft","Class","Simple",1,false,[],{"title":224,"metaDescription":225,"keywords":226,"canonicalUrl":227,"structuredData":228},"What is CVE-2020-17527? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-17527, a high severity cyber security vulnerability from 2020. While investigating bug 64830 it was discovered that Apache...","CVE-2020-17527, CVE-2020-17527 vulnerability, CVE-2020-17527 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, netapp security, tomcat vulnerability, element_plug-in vulnerability","\u002Fwhat-is\u002Fcve-2020-17527",{"@context":229,"@type":230,"headline":224,"description":225,"datePublished":10,"dateModified":11,"author":231,"publisher":235,"about":239,"mainEntityOfPage":243,"articleSection":246,"keywords":247},"https:\u002F\u002Fschema.org","TechArticle",{"@type":232,"name":233,"url":234},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":232,"name":233,"url":234,"logo":236},{"@type":237,"url":238},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":240,"name":6,"description":241,"additionalType":242},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":244,"@id":245},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-17527","Cybersecurity","CVE-2020-17527, CVE-2020-17527 vulnerability, CVE-2020-17527 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[249,368,378,386],{"Operator":26,"Negate":26,"Nodes":250},[251],{"Operator":252,"Negate":26,"CPEMatch":253},"OR",[254,258,262,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,332,334,336,338,340,342,344,347,350,353,356,359,362,365],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":255,"VersionStartExcluding":26,"VersionStartIncluding":256,"VersionEndExcluding":26,"VersionEndIncluding":257},"331F7519-79B9-480B-AF4F-E976C003F044","8.5.1","8.5.59",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":259,"VersionStartExcluding":26,"VersionStartIncluding":260,"VersionEndExcluding":26,"VersionEndIncluding":261},"FFF08CD9-EBB1-448B-A8E8-C940C77B1D5E","9.0.1","9.0.35",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":263,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"89B129B2-FB6F-4EF9-BF12-E589A87996CF",{"Vulnerable":4,"Criteria":265,"MatchCriteriaID":266,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*","8B6787B6-54A8-475E-BA1C-AB99334B2535",{"Vulnerable":4,"Criteria":268,"MatchCriteriaID":269,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*","EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1",{"Vulnerable":4,"Criteria":271,"MatchCriteriaID":272,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*","E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB",{"Vulnerable":4,"Criteria":274,"MatchCriteriaID":275,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*","8A6DA0BE-908C-4DA8-A191-A0113235E99A",{"Vulnerable":4,"Criteria":277,"MatchCriteriaID":278,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*","39029C72-28B4-46A4-BFF5-EC822CFB2A4C",{"Vulnerable":4,"Criteria":280,"MatchCriteriaID":281,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*","1A2E05A3-014F-4C4D-81E5-88E725FBD6AD",{"Vulnerable":4,"Criteria":283,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*","166C533C-0833-41D5-99B6-17A4FAB3CAF0",{"Vulnerable":4,"Criteria":286,"MatchCriteriaID":287,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*","D3768C60-21FA-4B92-B98C-C3A2602D1BC4",{"Vulnerable":4,"Criteria":289,"MatchCriteriaID":290,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*","DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325",{"Vulnerable":4,"Criteria":292,"MatchCriteriaID":293,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*","C2409CC7-6A85-4A66-A457-0D62B9895DC1",{"Vulnerable":4,"Criteria":295,"MatchCriteriaID":296,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*","B392A7E5-4455-4B1C-8FAC-AE6DDC70689E",{"Vulnerable":4,"Criteria":298,"MatchCriteriaID":299,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*","EF411DDA-2601-449A-9046-D250419A0E1A",{"Vulnerable":4,"Criteria":301,"MatchCriteriaID":302,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*","D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02",{"Vulnerable":4,"Criteria":304,"MatchCriteriaID":305,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*","1B4FBF97-DE16-4E5E-BE19-471E01818D40",{"Vulnerable":4,"Criteria":307,"MatchCriteriaID":308,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*","3B266B1E-24B5-47EE-A421-E0E3CC0C7471",{"Vulnerable":4,"Criteria":310,"MatchCriteriaID":311,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*","29614C3A-6FB3-41C7-B56E-9CC3F45B04F0",{"Vulnerable":4,"Criteria":313,"MatchCriteriaID":314,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*","C6AB156C-8FF6-4727-AF75-590D0DCB3F9D",{"Vulnerable":4,"Criteria":316,"MatchCriteriaID":317,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*","49AAF4DF-F61D-47A8-8788-A21E317A145D",{"Vulnerable":4,"Criteria":319,"MatchCriteriaID":320,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*","454211D0-60A2-4661-AECA-4C0121413FEB",{"Vulnerable":4,"Criteria":322,"MatchCriteriaID":323,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*","0686F977-889F-4960-8E0B-7784B73A7F2D",{"Vulnerable":4,"Criteria":325,"MatchCriteriaID":326,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*","558703AE-DB5E-4DFF-B497-C36694DD7B24",{"Vulnerable":4,"Criteria":328,"MatchCriteriaID":329,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*","ED6273F2-1165-47A4-8DD7-9E9B2472941B",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":331,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9F2604F0-857C-46CE-AEE1-B44465AEF60A",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":333,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3B091EFC-E08F-4479-8D7C-2F7C354C2825",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":335,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"236DC804-3275-4395-BFAA-260E66AB752B",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":337,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"41F32E7D-12E8-4EC9-A504-7CA293CC8821",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":339,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C1F838B-B872-4A46-A0AF-E7139E940287",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":341,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA41695A-A680-43C3-A844-0E5863E049E5",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":343,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"90CD7E85-4FF9-4158-AC78-4BFCBC882A65",{"Vulnerable":4,"Criteria":345,"MatchCriteriaID":346,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*","7EA56B52-1015-40CD-B10C-393768094269",{"Vulnerable":4,"Criteria":348,"MatchCriteriaID":349,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*","501B0D4A-D636-4736-979B-D5023599CEFB",{"Vulnerable":4,"Criteria":351,"MatchCriteriaID":352,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*","94E7764F-BF9E-463E-B446-A9A8DB92BB97",{"Vulnerable":4,"Criteria":354,"MatchCriteriaID":355,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*","53A9F7EE-AF2A-43E5-B708-0198784AB45A",{"Vulnerable":4,"Criteria":357,"MatchCriteriaID":358,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*","AC872C5F-63AF-4BB8-8629-334FC9704AE8",{"Vulnerable":4,"Criteria":360,"MatchCriteriaID":361,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*","94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8",{"Vulnerable":4,"Criteria":363,"MatchCriteriaID":364,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*","310B0163-01DE-40DA-A2EA-FFA4A6100037",{"Vulnerable":4,"Criteria":366,"MatchCriteriaID":367,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*","75420449-A951-4133-A5F1-4C01F2DF843B",{"Operator":26,"Negate":26,"Nodes":369},[370],{"Operator":252,"Negate":26,"CPEMatch":371},[372,374],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":373,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B5DA9DF4-0CE6-479F-ACAC-8059558F7462",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":375,"VersionStartExcluding":26,"VersionStartIncluding":376,"VersionEndExcluding":26,"VersionEndIncluding":377},"34B80C9D-62AA-42FA-AB46-F8A414FCBE5E","3.0.0","3.1.3",{"Operator":26,"Negate":26,"Nodes":379},[380],{"Operator":252,"Negate":26,"CPEMatch":381},[382,384],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":383,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":385,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":387},[388],{"Operator":252,"Negate":26,"CPEMatch":389},[390,393,395,397,399,401,403,405,408,410,412],{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":391,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":392,"VersionEndIncluding":26},"D0DBC938-A782-433F-8BF1-CA250C332AA7","21.1.2",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":394,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B6B6FE82-7BFA-481D-99D6-789B146CA18B",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":396,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4479F76A-4B67-41CC-98C7-C76B81050F8E",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":398,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C4A94B36-479F-48F2-9B9E-ACEA2589EF48",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":400,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":402,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":404,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F69B9A5-F21B-4904-9F27-95C0F7A628E3",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":406,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":407,"VersionEndIncluding":26},"44B24982-87BE-4563-8B7E-D846607B641B","8.0.23",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":409,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"77E39D5C-5EFA-4FEB-909E-0A92004F2563",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":411,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"630C8E99-FE49-486E-9003-40B82809B7A3",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":413,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C842DE9E-5E12-4295-AFA5-DEB5FEDE490A",[],[416],{"id":417,"eventType":418,"eventTime":419,"details":420,"label":421,"color":422},"b4bd9ef5-fdaf-40b3-af4b-e19437a67502","HIGH_EPSS_DELTA","2026-06-16T04:05:54.136773+00:00","Daily EPSS score increased by 0.141 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":424,"version":32},1792256782714,{"score":426,"band":427,"action":428,"scoredAt":429},52,"Medium","Plan remediation","2026-10-16T06:49:57.974681+00:00"]