CVE-2020-1938

🗓️ 24 Feb 2020 21:19:18Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 15 Media mentions👁 4215 Views

Apache Tomcat AJP Connector Vulnerability CVE-2020-193

Reporter	Title	Published	Views	Family All 349
GithubExploit	Exploit for CVE-2020-1938	29 Nov 202508:31	–	githubexploit
GithubExploit	pentest-report-clinic-sangabriel	18 May 202611:28	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	22 Feb 202016:16	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	11 Jul 202114:38	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	21 Feb 202014:55	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	21 Mar 202613:26	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	21 Feb 202017:24	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	21 Feb 202008:42	–	githubexploit
GithubExploit	Exploit for CVE-2020-1938	8 Apr 202604:47	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	29 Aug 202406:38	–	githubexploit

NVD

Vulners

Node

apache geodeMatch1.12.0

apache tomcatRange7.0.0–7.0.100

apache tomcatRange8.5.0–8.5.51

apache tomcatRange9.0.0–9.0.31

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

Node

oracle agile_engineering_data_managementMatch6.2.1.0

oracle agile_plmMatch9.3.3

oracle agile_plmMatch9.3.5

oracle agile_plmMatch9.3.6

oracle communications_element_managerMatch8.1.1

oracle communications_element_managerMatch8.2.0

oracle communications_element_managerMatch8.2.1

oracle communications_instant_messaging_serverMatch10.0.1.4.0

oracle health_sciences_empirica_inspectionsMatch1.0.1.2

oracle health_sciences_empirica_signalMatch7.3.3

oracle hospitality_guest_accessMatch4.2.0

oracle hospitality_guest_accessMatch4.2.1

oracle instantis_enterprisetrackRange17.1–17.3

oracle mysql_enterprise_monitorRange≤4.0.12

oracle mysql_enterprise_monitorRange8.0.0–8.0.20

oracle siebel_ui_frameworkRange≤20.5

oracle transportation_managementMatch6.3.7

oracle workload_managerMatch12.2.0.1

oracle workload_managerMatch18c

oracle workload_managerMatch19c

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

opensuse leapMatch15.1

Node

blackberry good_controlRange≤5.2.58.38

blackberry workspaces_serverMatch7.0.1

blackberry workspaces_serverMatch7.1.2

blackberry workspaces_serverMatch8.1.0

blackberry workspaces_serverMatch9.0

Node

netapp data_availability_servicesMatch-

netapp oncommand_system_managerRange3.0.0–3.1.3

[
  {
    "product": "Apache Tomcat",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Tomcat 9.0.0.M1 to 9.0.0.30"
      },
      {
        "status": "affected",
        "version": "8.5.0 to 8.5.50"
      },
      {
        "status": "affected",
        "version": "7.0.0 to 7.0.99"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r089dc67c0358a1556dd279c762c74f32d7a254a54836b7ee2d839d8e%40%3Cdev.tomee.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2020.html
lists	www.lists.apache.org/thread.html/rce2af55f6e144ffcdc025f997eddceb315dfbc0b230e3d750a7f7425%40%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/r7c6f492fbd39af34a68681dbbba0468490ff1a97a1bd79c6a53610ef%40%3Cannounce.tomcat.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-03/msg00025.html
debian	www.debian.org/security/2020/dsa-4673
lists	www.lists.apache.org/thread.html/r47caef01f663106c2bb81d116b8380d62beac9e543dd3f3bc2c2beda%40%3Ccommits.tomee.apache.org%3E
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L46WJIV6UV3FWA5O5YEY6XLA73RYD53B/
lists	www.lists.apache.org/thread.html/re5eecbe5bf967439bafeeaa85987b3a43f0e6efe06b6976ee768cde2%40%3Cusers.tomcat.apache.org%3E

27 Oct 2025 17:37Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 3.19.8

EPSS0.94469

SSVC

In Wild