Lucene search

CVE-2020-1938

🗓️ 24 Feb 2020 22:12:15Reported by apacheType

cve🔗 web.nvd.nist.gov👁 3712 Views🌐 65 Media mentions

Apache Tomcat AJP Connector Vulnerability CVE-2020-193

Reporter	Title	Published	Views	Family All 199
Oracle linux	tomcat6 security update	23 Mar 202000:00	–	oraclelinux
Oracle linux	tomcat security update	22 Mar 202000:00	–	oraclelinux
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM Spectrum Protect Plus (CVE-2020-1938)	12 Jun 202020:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	12 May 202009:51	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2020-1938)	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM Platform Symphony	6 Apr 202003:58	–	ibm
ThreatPost	Apache Tomcat Exploit Poised to Pounce, Stealing Files	23 Mar 202020:56	–	threatpost
ThreatPost	Wordpress Yellow Pencil Plugin Flaws Actively Exploited	12 Apr 201914:13	–	threatpost
ThreatPost	Users Urged to Uninstall WordPress Yuzo Plugin After Flaw Exploited	11 Apr 201917:19	–	threatpost
ThreatPost	Wipro Confirms Hack and Supply Chain Attacks on Customers	16 Apr 201918:01	–	threatpost

Nvd

Vulners

Node

apache geodeMatch1.12.0

apache tomcatRange7.0.0–7.0.99

apache tomcatRange8.5.0–8.5.50

apache tomcatRange9.0.0–9.0.30

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

Node

oracle agile_engineering_data_managementMatch6.2.1.0

oracle agile_plmMatch9.3.3

oracle agile_plmMatch9.3.5

oracle agile_plmMatch9.3.6

oracle communications_element_managerMatch8.1.1

oracle communications_element_managerMatch8.2.0

oracle communications_element_managerMatch8.2.1

oracle communications_instant_messaging_serverMatch10.0.1.4.0

oracle health_sciences_empirica_inspectionsMatch1.0.1.2

oracle health_sciences_empirica_signalMatch7.3.3

oracle hospitality_guest_accessMatch4.2.0

oracle hospitality_guest_accessMatch4.2.1

oracle instantis_enterprisetrackRange17.1–17.3

oracle mysql_enterprise_monitorRange≤4.0.12

oracle mysql_enterprise_monitorRange8.0.0–8.0.20

oracle siebel_ui_frameworkRange≤20.5

oracle transportation_managementMatch6.3.7

oracle workload_managerMatch12.2.0.1

oracle workload_managerMatch18c

oracle workload_managerMatch19c

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

opensuse leapMatch15.1

Node

blackberry good_controlRange≤5.2.58.38

blackberry workspaces_serverMatch7.0.1

blackberry workspaces_serverMatch7.1.2

blackberry workspaces_serverMatch8.1.0

blackberry workspaces_serverMatch9.0

Node

netapp data_availability_servicesMatch-

netapp oncommand_system_managerRange3.0.0–3.1.3

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 9.0.0.M1 to 9.0.0.30"
      },
      {
        "status": "affected",
        "version": "8.5.0 to 8.5.50"
      },
      {
        "status": "affected",
        "version": "7.0.0 to 7.0.99"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r74328b178f9f37fe759dffbc9c1f2793e66d79d7a8a20d3836551794%40%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/rb1c0fb105ce2b93b7ec6fc1b77dd208022621a91c12d1f580813cfed%40%3Cdev.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/r17aaa3a05b5b7fe9075613dd0c681efa60a4f8c8fbad152c61371b6e%40%3Cusers.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/rb2fc890bef23cbc7f343900005fe1edd3b091cf18dada455580258f9%40%3Cusers.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/rcd5cd301e9e7e39f939baf2f5d58704750be07a5e2d3393e40ca7194%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r75113652e46c4dee687236510649acfb70d2c63e074152049c3f399d%40%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/rf26663f42e7f1a1d1cac732469fb5e92c89908a48b61ec546dbb79ca%40%3Cbugs.httpd.apache.org%3E
lists	www.lists.apache.org/thread.html/r92d78655c068d0bc991d1edbdfb24f9c5134603e647cade1113d4e0a%40%3Cusers.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/rf992c5adf376294af31378a70aa8a158388a41d7039668821be28df3%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.apache.org/thread.html/r5e2f1201b92ee05a0527cfc076a81ea0c270be299b87895c0ddbe02b%40%3Cusers.tomcat.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Feb 2020 22:15Current

9.9High risk

Vulners AI Score9.9

CVSS27.5

CVSS39.8

EPSS0.974

In Wild