[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2OYSfY25PNfZTdQ0NeUqgabsM88QM4J-DAD-6u3Yg3E":3,"g5a-risk:CVE-2021-25122":395},{"success":4,"data":5,"meta":393},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":121,"references":122,"referencesCount":178,"weaknesses":179,"weaknessesCount":188,"isActivelyExploited":189,"cisaInfo":26,"otxData":26,"relatedBlogPosts":190,"seoMetadata":191,"configurations":216,"relatedVendorCves":377,"notableEvents":378},"CVE-2021-25122","What is CVE-2021-25122?","When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.","When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request he...","2021-03-01T12:15:13.793","2023-11-07T03:31:23.94",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.18114,[39,39,39,39,39,39,39],"High",[43,48,51,54,59,62,67,70,74,78,82,86,89,92,95,98,102,105,108,112,115,118],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","tomcat","*","cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"9.0.0","cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"10.0.0","cpe:2.3:a:apache:tomcat:10.0.0:-:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"oracle","agile_plm","9.3.3","cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":68,"criteria":69,"vulnerable":4},"9.3.6","cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",{"vendor":63,"product":71,"version":72,"criteria":73,"vulnerable":4},"communications_cloud_native_core_policy","1.14.0","cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",{"vendor":63,"product":75,"version":76,"criteria":77,"vulnerable":4},"communications_cloud_native_core_security_edge_protection_proxy","1.6.0","cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.6.0:*:*:*:*:*:*:*",{"vendor":63,"product":79,"version":80,"criteria":81,"vulnerable":4},"communications_instant_messaging_server","10.0.1.5.0","cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*",{"vendor":63,"product":83,"version":84,"criteria":85,"vulnerable":4},"database","12.2.0.1","cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",{"vendor":63,"product":83,"version":87,"criteria":88,"vulnerable":4},"19c","cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",{"vendor":63,"product":83,"version":90,"criteria":91,"vulnerable":4},"21c","cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",{"vendor":63,"product":93,"version":46,"criteria":94,"vulnerable":4},"graph_server_and_client","cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*",{"vendor":63,"product":93,"version":96,"criteria":97,"vulnerable":4},"21.3.0","cpe:2.3:a:oracle:graph_server_and_client:21.3.0:*:*:*:*:*:*:*",{"vendor":63,"product":99,"version":100,"criteria":101,"vulnerable":4},"instantis_enterprisetrack","17.1","cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",{"vendor":63,"product":99,"version":103,"criteria":104,"vulnerable":4},"17.2","cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",{"vendor":63,"product":99,"version":106,"criteria":107,"vulnerable":4},"17.3","cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",{"vendor":63,"product":109,"version":110,"criteria":111,"vulnerable":4},"managed_file_transfer","12.2.1.3.0","cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*",{"vendor":63,"product":109,"version":113,"criteria":114,"vulnerable":4},"12.2.1.4.0","cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*",{"vendor":63,"product":116,"version":46,"criteria":117,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",{"vendor":63,"product":119,"version":46,"criteria":120,"vulnerable":4},"siebel_ui_framework","cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",22,[123,129,133,137,140,143,146,149,152,156,160,164,167,172,175],{"url":124,"source":125,"tags":126},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2021\u002F03\u002F01\u002F1","Openwall",[127,128],"Mailing List","Third Party Advisory",{"url":130,"source":131,"tags":132},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.apache.org%3E","Apache",[],{"url":134,"source":131,"tags":135},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E",[127,136],"Vendor Advisory",{"url":138,"source":131,"tags":139},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cdev.tomcat.apache.org%3E",[],{"url":141,"source":131,"tags":142},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cusers.tomcat.apache.org%3E",[],{"url":144,"source":131,"tags":145},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b%40%3Cusers.tomcat.apache.org%3E",[],{"url":147,"source":131,"tags":148},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947%40%3Cusers.tomcat.apache.org%3E",[],{"url":150,"source":131,"tags":151},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E",[],{"url":153,"source":154,"tags":155},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F03\u002Fmsg00018.html","Debian",[127,128],{"url":157,"source":158,"tags":159},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202208-34","Gentoo",[128],{"url":161,"source":162,"tags":163},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210409-0002\u002F","Netapp",[128],{"url":165,"source":154,"tags":166},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2021\u002Fdsa-4891",[128],{"url":168,"source":169,"tags":170},"https:\u002F\u002Fwww.oracle.com\u002F\u002Fsecurity-alerts\u002Fcpujul2021.html","Oracle",[171,128],"Patch",{"url":173,"source":169,"tags":174},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2022.html",[171,128],{"url":176,"source":169,"tags":177},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[171,128],15,[180],{"id":181,"name":182,"description":183,"extendedDescription":184,"status":185,"abstraction":186,"structure":187},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker.  Some kinds of sensitive information include:\nInformation might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected.  These parties include:\nInformation exposures can occur in different ways:\nIt is common practice to describe any loss of confidentiality as an \"information exposure,\" but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read.  CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.","Draft","Class","Simple",1,false,[],{"title":192,"metaDescription":193,"keywords":194,"canonicalUrl":195,"structuredData":196},"What is CVE-2021-25122? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-25122, a high severity cyber security vulnerability from 2021. When responding to new h2c connection requests, Apache Tomc...","CVE-2021-25122, CVE-2021-25122 vulnerability, CVE-2021-25122 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, debian security, oracle security, tomcat vulnerability, debian_linux vulnerability, agile_plm vulnerability, communications_cloud_native_core_policy vulnerability, communications_cloud_native_core_security_edge_protection_proxy vulnerability","\u002Fwhat-is\u002Fcve-2021-25122",{"@context":197,"@type":198,"headline":192,"description":193,"datePublished":10,"dateModified":11,"author":199,"publisher":203,"about":207,"mainEntityOfPage":211,"articleSection":214,"keywords":215},"https:\u002F\u002Fschema.org","TechArticle",{"@type":200,"name":201,"url":202},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":200,"name":201,"url":202,"logo":204},{"@type":205,"url":206},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":208,"name":6,"description":209,"additionalType":210},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":212,"@id":213},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-25122","Cybersecurity","CVE-2021-25122, CVE-2021-25122 vulnerability, CVE-2021-25122 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[217,329,337],{"Operator":26,"Negate":26,"Nodes":218},[219],{"Operator":220,"Negate":26,"CPEMatch":221},"OR",[222,226,229,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,299,302,305,308,311,314,317,320,323,326],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":224,"VersionEndExcluding":26,"VersionEndIncluding":225},"B4ABB491-6750-457E-B5A4-67C1146CB15F","8.5.0","8.5.61",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":49,"VersionEndExcluding":26,"VersionEndIncluding":228},"A9DFCBAF-1583-4C2F-8776-76F4DCB582B5","9.0.41",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9D0689FE-4BC0-4F53-8C79-34B21F9B86C2",{"Vulnerable":4,"Criteria":232,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*","89B129B2-FB6F-4EF9-BF12-E589A87996CF",{"Vulnerable":4,"Criteria":235,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*","8B6787B6-54A8-475E-BA1C-AB99334B2535",{"Vulnerable":4,"Criteria":238,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*","EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*","E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*","8A6DA0BE-908C-4DA8-A191-A0113235E99A",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*","39029C72-28B4-46A4-BFF5-EC822CFB2A4C",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*","1A2E05A3-014F-4C4D-81E5-88E725FBD6AD",{"Vulnerable":4,"Criteria":253,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*","166C533C-0833-41D5-99B6-17A4FAB3CAF0",{"Vulnerable":4,"Criteria":256,"MatchCriteriaID":257,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*","D3768C60-21FA-4B92-B98C-C3A2602D1BC4",{"Vulnerable":4,"Criteria":259,"MatchCriteriaID":260,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*","DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325",{"Vulnerable":4,"Criteria":262,"MatchCriteriaID":263,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*","9F542E12-6BA8-4504-A494-DA83E7E19BD5",{"Vulnerable":4,"Criteria":265,"MatchCriteriaID":266,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*","C2409CC7-6A85-4A66-A457-0D62B9895DC1",{"Vulnerable":4,"Criteria":268,"MatchCriteriaID":269,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*","B392A7E5-4455-4B1C-8FAC-AE6DDC70689E",{"Vulnerable":4,"Criteria":271,"MatchCriteriaID":272,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*","EF411DDA-2601-449A-9046-D250419A0E1A",{"Vulnerable":4,"Criteria":274,"MatchCriteriaID":275,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*","D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02",{"Vulnerable":4,"Criteria":277,"MatchCriteriaID":278,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*","1B4FBF97-DE16-4E5E-BE19-471E01818D40",{"Vulnerable":4,"Criteria":280,"MatchCriteriaID":281,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*","3B266B1E-24B5-47EE-A421-E0E3CC0C7471",{"Vulnerable":4,"Criteria":283,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*","29614C3A-6FB3-41C7-B56E-9CC3F45B04F0",{"Vulnerable":4,"Criteria":286,"MatchCriteriaID":287,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*","C6AB156C-8FF6-4727-AF75-590D0DCB3F9D",{"Vulnerable":4,"Criteria":289,"MatchCriteriaID":290,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*","C0C5F004-F7D8-45DB-B173-351C50B0EC16",{"Vulnerable":4,"Criteria":292,"MatchCriteriaID":293,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*","D1902D2E-1896-4D3D-9E1C-3A675255072C",{"Vulnerable":4,"Criteria":295,"MatchCriteriaID":296,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*","49AAF4DF-F61D-47A8-8788-A21E317A145D",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":298,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA7CC5E9-3631-4073-84C8-2C12D90686CB",{"Vulnerable":4,"Criteria":300,"MatchCriteriaID":301,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*","90CD7E85-4FF9-4158-AC78-4BFCBC882A65",{"Vulnerable":4,"Criteria":303,"MatchCriteriaID":304,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:*","83B9FF07-1B93-4F8C-AC56-7CA74E61B724",{"Vulnerable":4,"Criteria":306,"MatchCriteriaID":307,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*","7EA56B52-1015-40CD-B10C-393768094269",{"Vulnerable":4,"Criteria":309,"MatchCriteriaID":310,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*","501B0D4A-D636-4736-979B-D5023599CEFB",{"Vulnerable":4,"Criteria":312,"MatchCriteriaID":313,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*","94E7764F-BF9E-463E-B446-A9A8DB92BB97",{"Vulnerable":4,"Criteria":315,"MatchCriteriaID":316,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*","53A9F7EE-AF2A-43E5-B708-0198784AB45A",{"Vulnerable":4,"Criteria":318,"MatchCriteriaID":319,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*","AC872C5F-63AF-4BB8-8629-334FC9704AE8",{"Vulnerable":4,"Criteria":321,"MatchCriteriaID":322,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*","94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8",{"Vulnerable":4,"Criteria":324,"MatchCriteriaID":325,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*","310B0163-01DE-40DA-A2EA-FFA4A6100037",{"Vulnerable":4,"Criteria":327,"MatchCriteriaID":328,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*","75420449-A951-4133-A5F1-4C01F2DF843B",{"Operator":26,"Negate":26,"Nodes":330},[331],{"Operator":220,"Negate":26,"CPEMatch":332},[333,335],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":334,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":336,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Operator":26,"Negate":26,"Nodes":338},[339],{"Operator":220,"Negate":26,"CPEMatch":340},[341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,374],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":342,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D14ABF04-E460-4911-9C6C-B7BCEFE68E9D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":344,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C650FEDB-E903-4C2D-AD40-282AB5F2E3C2",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":346,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4479F76A-4B67-41CC-98C7-C76B81050F8E",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":348,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"45E5C9B0-AB25-4744-88E4-FD0C4A853001",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":350,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C4A94B36-479F-48F2-9B9E-ACEA2589EF48",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":352,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"46E7237C-00BD-4490-96C3-A8EAE4CE2C0B",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":354,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C1E05472-8F3A-4E46-90E5-50EA6D555FDC",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":356,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"02E34416-E767-4F61-8D2C-0D0202351F91",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":358,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":96,"VersionEndIncluding":26},"38532AE4-9C9F-4182-A791-FCD2BE27DEA6",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":360,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"715F9279-F31E-4CC0-A105-95A008EACBA6",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":362,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":364,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":366,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F69B9A5-F21B-4904-9F27-95C0F7A628E3",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":368,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2E3E923-E2AD-400D-A618-26ADF7F841A2",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":370,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9AB58D27-37F2-4A32-B786-3490024290A1",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":372,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":373},"F48F2267-61EA-4F12-ADE9-85CB6F6B290E","8.0.23",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":375,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":376},"90605BF7-9C9B-4AC2-83B6-3666C5A15D43","21.9",[],[379,386],{"id":380,"eventType":381,"eventTime":382,"details":383,"label":384,"color":385},"a339dffb-5e44-47f1-adce-87b5d6d4c507","HIGH_EPSS_DELTA","2025-11-19T04:06:05.38123+00:00","Daily EPSS score increased by 0.104 on 2023-12-30","EPSS Score Increased","red",{"id":387,"eventType":388,"eventTime":389,"details":390,"label":391,"color":392},"94c94ab1-24cb-463d-bf4a-132a7e5fa4bb","LOW_EPSS_DELTA","2025-11-22T04:05:52.73543+00:00","Daily EPSS score decreased by 0.104 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":394,"version":32},1792245142114,{"score":396,"band":397,"action":398,"scoredAt":399},48,"Medium","Plan remediation","2026-10-16T06:50:35.046312+00:00"]