[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP9d6nbk6ZdFrLpnBIgZGEFsJjyNy8FvPidGP5fFZ-aQ":3,"g5a-risk:CVE-2020-1935":453},{"success":4,"data":5,"meta":451},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":155,"references":156,"referencesCount":224,"weaknesses":225,"weaknessesCount":234,"isActivelyExploited":235,"cisaInfo":27,"otxData":27,"relatedBlogPosts":236,"seoMetadata":237,"configurations":262,"relatedVendorCves":449,"notableEvents":450},"CVE-2020-1935","What is CVE-2020-1935?","In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.","In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed so...","2020-02-24T22:15:11.98","2023-11-07T03:19:36.62",4.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW","MEDIUM",null,2.2,2.5,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",5.8,8.6,4.9,0.09386,[39,39,39,39,39,39,39],"Medium",[43,48,51,56,59,62,67,72,77,80,85,89,92,95,99,102,105,109,113,117,121,124,128,131,134,138,141,145,149,152],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"9.0.0","cpe:2.3:a:apache:tomcat:9.0.0:-:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":60,"criteria":61,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":68,"product":69,"version":70,"criteria":71,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":73,"product":74,"version":75,"criteria":76,"vulnerable":4},"netapp","data_availability_services","-","cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*",{"vendor":73,"product":78,"version":46,"criteria":79,"vulnerable":4},"oncommand_system_manager","cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":83,"criteria":84,"vulnerable":4},"oracle","agile_engineering_data_management","6.2.1.0","cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",{"vendor":81,"product":86,"version":87,"criteria":88,"vulnerable":4},"agile_product_lifecycle_management","9.3.3","cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:*:*:*:*:*:*:*",{"vendor":81,"product":86,"version":90,"criteria":91,"vulnerable":4},"9.3.5","cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:*:*:*:*:*:*:*",{"vendor":81,"product":86,"version":93,"criteria":94,"vulnerable":4},"9.3.6","cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:*",{"vendor":81,"product":96,"version":97,"criteria":98,"vulnerable":4},"communications_element_manager","8.1.1","cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*",{"vendor":81,"product":96,"version":100,"criteria":101,"vulnerable":4},"8.2.0","cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*",{"vendor":81,"product":96,"version":103,"criteria":104,"vulnerable":4},"8.2.1","cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*",{"vendor":81,"product":106,"version":107,"criteria":108,"vulnerable":4},"communications_instant_messaging_server","10.0.1.4.0","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*",{"vendor":81,"product":110,"version":111,"criteria":112,"vulnerable":4},"health_sciences_empirica_inspections","1.0.1.2","cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.2:*:*:*:*:*:*:*",{"vendor":81,"product":114,"version":115,"criteria":116,"vulnerable":4},"health_sciences_empirica_signal","7.3.3","cpe:2.3:a:oracle:health_sciences_empirica_signal:7.3.3:*:*:*:*:*:*:*",{"vendor":81,"product":118,"version":119,"criteria":120,"vulnerable":4},"hospitality_guest_access","4.2.0","cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*",{"vendor":81,"product":118,"version":122,"criteria":123,"vulnerable":4},"4.2.1","cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*",{"vendor":81,"product":125,"version":126,"criteria":127,"vulnerable":4},"hyperion_infrastructure_technology","11.1.2.4","cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",{"vendor":81,"product":129,"version":46,"criteria":130,"vulnerable":4},"instantis_enterprisetrack","cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*",{"vendor":81,"product":132,"version":46,"criteria":133,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",{"vendor":81,"product":135,"version":136,"criteria":137,"vulnerable":4},"retail_order_broker","15.0","cpe:2.3:a:oracle:retail_order_broker:15.0:*:*:*:*:*:*:*",{"vendor":81,"product":139,"version":46,"criteria":140,"vulnerable":4},"siebel_ui_framework","cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",{"vendor":81,"product":142,"version":143,"criteria":144,"vulnerable":4},"transportation_management","6.3.7","cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*",{"vendor":81,"product":146,"version":147,"criteria":148,"vulnerable":4},"workload_manager","12.2.0.1","cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*",{"vendor":81,"product":146,"version":150,"criteria":151,"vulnerable":4},"18c","cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*",{"vendor":81,"product":146,"version":153,"criteria":154,"vulnerable":4},"19c","cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*",30,[157,164,169,172,175,178,181,184,187,190,193,197,200,204,208,211,214,218,221],{"url":158,"source":159,"tags":160},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-03\u002Fmsg00025.html","Opensuse",[161,162,163],"Broken Link","Mailing List","Third Party Advisory",{"url":165,"source":166,"tags":167},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr127f76181aceffea2bd4711b03c595d0f115f63e020348fe925a916c%40%3Cannounce.tomcat.apache.org%3E","Apache",[162,168],"Vendor Advisory",{"url":170,"source":166,"tags":171},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr441c1f30a252bf14b07396286f6abd8089ce4240e91323211f1a2d75%40%3Cusers.tomcat.apache.org%3E",[],{"url":173,"source":166,"tags":174},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr660cd379afe346f10d72c0eaa8459ccc95d83aff181671b7e9076919%40%3Cusers.tomcat.apache.org%3E",[],{"url":176,"source":166,"tags":177},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7bc994c965a34876bd94d5ff15b4e1e30b6220a15eb9b47c81915b78%40%3Ccommits.tomee.apache.org%3E",[],{"url":179,"source":166,"tags":180},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr80e9c8417c77d52c62809168b96912bda70ddf7748f19f8210f745b1%40%3Cusers.tomcat.apache.org%3E",[],{"url":182,"source":166,"tags":183},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9ce7918faf347e7aac32be930bf26c233b0b140fe37af0bb294158b6%40%3Cdev.tomcat.apache.org%3E",[],{"url":185,"source":166,"tags":186},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra5dee390ad2d60307b8362505c059cd6a726de4d146d63dfce1e05e7%40%3Cusers.tomcat.apache.org%3E",[],{"url":188,"source":166,"tags":189},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc31cbabb46cdc58bbdd8519a8f64b6236b2635a3922bbeba0f0e3743%40%3Ccommits.tomee.apache.org%3E",[],{"url":191,"source":166,"tags":192},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd547be0c9d821b4b1000a694b8e58ef9f5e2d66db03a31dfe77c4b18%40%3Cusers.tomcat.apache.org%3E",[],{"url":194,"source":195,"tags":196},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F03\u002Fmsg00006.html","Debian",[162,163],{"url":198,"source":195,"tags":199},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F05\u002Fmsg00026.html",[162,163],{"url":201,"source":202,"tags":203},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200327-0005\u002F","Netapp",[163],{"url":205,"source":206,"tags":207},"https:\u002F\u002Fusn.ubuntu.com\u002F4448-1\u002F","Ubuntu",[163],{"url":209,"source":195,"tags":210},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4673",[163],{"url":212,"source":195,"tags":213},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4680",[163],{"url":215,"source":216,"tags":217},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2021.html","Oracle",[163],{"url":219,"source":216,"tags":220},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[163],{"url":222,"source":216,"tags":223},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2020.html",[163],19,[226],{"id":227,"name":228,"description":229,"extendedDescription":230,"status":231,"abstraction":232,"structure":233},"CWE-444","Inconsistent Interpretation of HTTP Requests ('HTTP Request\u002FResponse Smuggling')","The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","HTTP requests or responses (\"messages\") can be\n\t   malformed or unexpected in ways that cause web servers or\n\t   clients to interpret the messages in different ways than\n\t   intermediary HTTP agents such as load balancers, reverse\n\t   proxies, web caching proxies, application firewalls,\n\t   etc. For example, an adversary may be able to add duplicate\n\t   or different header fields that a client or server might\n\t   interpret as one set of messages, whereas the intermediary\n\t   might interpret the same sequence of bytes as a different\n\t   set of messages. For example, discrepancies can arise in\n\t   how to handle duplicate headers like two Transfer-encoding\n\t   (TE) or two Content-length (CL), or the malicious HTTP\n\t   message will have different headers for TE and\n\t   CL.\nThe inconsistent parsing and interpretation of messages\n\t   can allow the adversary to \"smuggle\" a message to the\n\t   client\u002Fserver without the intermediary being aware of it.\nThis weakness is usually the result of the usage\n\t   of outdated or incompatible HTTP protocol versions in the\n\t   HTTP agents.","Incomplete","Base","Simple",1,false,[],{"title":238,"metaDescription":239,"keywords":240,"canonicalUrl":241,"structuredData":242},"What is CVE-2020-1935? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-1935, a medium severity cyber security vulnerability from 2020. In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7...","CVE-2020-1935, CVE-2020-1935 vulnerability, CVE-2020-1935 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, debian security, canonical security, opensuse security, netapp security, oracle security, tomcat vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2020-1935",{"@context":243,"@type":244,"headline":238,"description":239,"datePublished":10,"dateModified":11,"author":245,"publisher":249,"about":253,"mainEntityOfPage":257,"articleSection":260,"keywords":261},"https:\u002F\u002Fschema.org","TechArticle",{"@type":246,"name":247,"url":248},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":246,"name":247,"url":248,"logo":250},{"@type":251,"url":252},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":254,"name":6,"description":255,"additionalType":256},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":258,"@id":259},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-1935","Cybersecurity","CVE-2020-1935, CVE-2020-1935 vulnerability, CVE-2020-1935 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[263,362,372,378,384,394],{"Operator":27,"Negate":27,"Nodes":264},[265],{"Operator":266,"Negate":27,"CPEMatch":267},"OR",[268,272,276,279,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":269,"VersionStartExcluding":27,"VersionStartIncluding":270,"VersionEndExcluding":27,"VersionEndIncluding":271},"2EC441A9-309B-4478-A60C-AD9EE2E31C53","7.0.0","7.0.99",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":273,"VersionStartExcluding":27,"VersionStartIncluding":274,"VersionEndExcluding":27,"VersionEndIncluding":275},"0CE458D0-7BED-406E-AEDC-0A74D5B2245B","8.5.0","8.5.50",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":277,"VersionStartExcluding":27,"VersionStartIncluding":49,"VersionEndExcluding":27,"VersionEndIncluding":278},"255568C5-7907-4C8C-BD1A-8F1F6061CE17","9.0.30",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":280,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"67BBBD83-E232-4198-9748-C512D9E0EEDD",{"Vulnerable":4,"Criteria":282,"MatchCriteriaID":283,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*","9D0689FE-4BC0-4F53-8C79-34B21F9B86C2",{"Vulnerable":4,"Criteria":285,"MatchCriteriaID":286,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*","89B129B2-FB6F-4EF9-BF12-E589A87996CF",{"Vulnerable":4,"Criteria":288,"MatchCriteriaID":289,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*","8B6787B6-54A8-475E-BA1C-AB99334B2535",{"Vulnerable":4,"Criteria":291,"MatchCriteriaID":292,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*","EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1",{"Vulnerable":4,"Criteria":294,"MatchCriteriaID":295,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*","E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB",{"Vulnerable":4,"Criteria":297,"MatchCriteriaID":298,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*","8A6DA0BE-908C-4DA8-A191-A0113235E99A",{"Vulnerable":4,"Criteria":300,"MatchCriteriaID":301,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*","39029C72-28B4-46A4-BFF5-EC822CFB2A4C",{"Vulnerable":4,"Criteria":303,"MatchCriteriaID":304,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*","1A2E05A3-014F-4C4D-81E5-88E725FBD6AD",{"Vulnerable":4,"Criteria":306,"MatchCriteriaID":307,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*","166C533C-0833-41D5-99B6-17A4FAB3CAF0",{"Vulnerable":4,"Criteria":309,"MatchCriteriaID":310,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*","D3768C60-21FA-4B92-B98C-C3A2602D1BC4",{"Vulnerable":4,"Criteria":312,"MatchCriteriaID":313,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*","DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325",{"Vulnerable":4,"Criteria":315,"MatchCriteriaID":316,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*","9F542E12-6BA8-4504-A494-DA83E7E19BD5",{"Vulnerable":4,"Criteria":318,"MatchCriteriaID":319,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*","C2409CC7-6A85-4A66-A457-0D62B9895DC1",{"Vulnerable":4,"Criteria":321,"MatchCriteriaID":322,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*","B392A7E5-4455-4B1C-8FAC-AE6DDC70689E",{"Vulnerable":4,"Criteria":324,"MatchCriteriaID":325,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*","EF411DDA-2601-449A-9046-D250419A0E1A",{"Vulnerable":4,"Criteria":327,"MatchCriteriaID":328,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*","D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02",{"Vulnerable":4,"Criteria":330,"MatchCriteriaID":331,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*","1B4FBF97-DE16-4E5E-BE19-471E01818D40",{"Vulnerable":4,"Criteria":333,"MatchCriteriaID":334,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*","3B266B1E-24B5-47EE-A421-E0E3CC0C7471",{"Vulnerable":4,"Criteria":336,"MatchCriteriaID":337,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*","29614C3A-6FB3-41C7-B56E-9CC3F45B04F0",{"Vulnerable":4,"Criteria":339,"MatchCriteriaID":340,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*","C6AB156C-8FF6-4727-AF75-590D0DCB3F9D",{"Vulnerable":4,"Criteria":342,"MatchCriteriaID":343,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*","C0C5F004-F7D8-45DB-B173-351C50B0EC16",{"Vulnerable":4,"Criteria":345,"MatchCriteriaID":346,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*","D1902D2E-1896-4D3D-9E1C-3A675255072C",{"Vulnerable":4,"Criteria":348,"MatchCriteriaID":349,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*","49AAF4DF-F61D-47A8-8788-A21E317A145D",{"Vulnerable":4,"Criteria":351,"MatchCriteriaID":352,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*","454211D0-60A2-4661-AECA-4C0121413FEB",{"Vulnerable":4,"Criteria":354,"MatchCriteriaID":355,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*","0686F977-889F-4960-8E0B-7784B73A7F2D",{"Vulnerable":4,"Criteria":357,"MatchCriteriaID":358,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*","558703AE-DB5E-4DFF-B497-C36694DD7B24",{"Vulnerable":4,"Criteria":360,"MatchCriteriaID":361,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*","ED6273F2-1165-47A4-8DD7-9E9B2472941B",{"Operator":27,"Negate":27,"Nodes":363},[364],{"Operator":266,"Negate":27,"CPEMatch":365},[366,368,370],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":367,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":369,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":371,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":27,"Negate":27,"Nodes":373},[374],{"Operator":266,"Negate":27,"CPEMatch":375},[376],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":377,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Operator":27,"Negate":27,"Nodes":379},[380],{"Operator":266,"Negate":27,"CPEMatch":381},[382],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":383,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":27,"Negate":27,"Nodes":385},[386],{"Operator":266,"Negate":27,"CPEMatch":387},[388,390],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":389,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0EF46487-B64A-454E-AECC-D74B83170ACD",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":391,"VersionStartExcluding":27,"VersionStartIncluding":392,"VersionEndExcluding":27,"VersionEndIncluding":393},"34B80C9D-62AA-42FA-AB46-F8A414FCBE5E","3.0.0","3.1.3",{"Operator":27,"Negate":27,"Nodes":395},[396],{"Operator":266,"Negate":27,"CPEMatch":397},[398,400,402,404,406,408,410,412,414,416,418,420,422,424,428,432,436,438,441,443,445,447],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":399,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80C9DBB8-3D50-4D5D-859A-B022EB7C2E64",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":401,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F8C893E4-1D3A-4687-BE5A-D26FFEBCCC78",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":403,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B0BB81C3-29FD-4AE0-8D46-456FAF135F6C",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":405,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4305ED0E-30CC-4AEA-8988-3D1EC93A0BB2",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":407,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0C57FD3A-0CC1-4BA9-879A-8C4A40234162",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":409,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"698FB6D0-B26F-4760-9B9B-1C65FBFF2126",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":411,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4F1D64BC-17BF-4DAE-B5FC-BC41F9C12DFD",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":413,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0DB23B9A-571E-4B77-B432-23F3DC9B67D1",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":415,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F5F58398-0001-42FE-BD17-44F924955C3D",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":417,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"456AE11C-DD5B-4EA9-AA93-AAFC988830EB",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":419,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1A3DC116-2844-47A1-BEC2-D0675DD97148",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":421,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":423,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DED59B62-C9BF-4C0E-B351-3884E8441655",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":425,"VersionStartExcluding":27,"VersionStartIncluding":426,"VersionEndExcluding":27,"VersionEndIncluding":427},"9A74FD5F-4FEA-4A74-8B92-72DFDE6BA464","17.1","17.3",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":429,"VersionStartExcluding":27,"VersionStartIncluding":430,"VersionEndExcluding":27,"VersionEndIncluding":431},"E7116EED-13F0-41A6-93D4-DBBDBD984423","4.0.0","4.0.12",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":433,"VersionStartExcluding":27,"VersionStartIncluding":434,"VersionEndExcluding":27,"VersionEndIncluding":435},"73573516-EDA0-4176-A3ED-2F7006C87F8E","8.0.0","8.0.20",{"Vulnerable":4,"Criteria":137,"MatchCriteriaID":437,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EE8CF045-09BB-4069-BCEC-496D5AE3B780",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":439,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":440},"F510ED6D-7BF8-4548-BF0F-3CF926EB135E","20.5",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":442,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A58642E0-CA59-4DE6-A83C-F551FC621C32",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":444,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AD848FE1-CFD7-490C-B008-DF3B30F3256F",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":446,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"630C8E99-FE49-486E-9003-40B82809B7A3",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":448,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C842DE9E-5E12-4295-AFA5-DEB5FEDE490A",[],[],{"lastModified":11,"cacheTime":452,"version":33},1792249676046,{"score":454,"band":455,"action":456,"scoredAt":457},29,"Low","Monitor","2026-10-16T06:47:58.55376+00:00"]