CVE-2020-17527

🗓️ 03 Dec 2020 18:30:14Reported by Debian Security Bug TrackerType

Apache Tomcat versions 8.5.0 to 8.5.59, 9.0.0-M1 to 9.0.39, and 10.0.0-M1 to 10.0.0-M9 HTTP/2 Connection Re-use Vulnerabilit

Reporter	Title	Published	Views	Family All 164
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	27 Jul 202116:25	–	ibm
IBM Security Bulletins	Security Bulletin: : App Connect Professional is affected by Apache Tomcat vulnerabilities.	19 Mar 202112:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-17527	25 Jan 202207:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Apache Tomcat < 10.0.0-M10 Multiple Vulnerabilities	14 Apr 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2020-1473) (deprecated)	18 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2021-1473)	14 Jan 202100:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	tomcat9	9.0.40-1	tomcat9_9.0.40-1_all.deb
Debian	12	all	tomcat9	9.0.40-1	tomcat9_9.0.40-1_all.deb
Debian	13	all	tomcat9	9.0.40-1	tomcat9_9.0.40-1_all.deb
Debian	14	all	tomcat9	9.0.40-1	tomcat9_9.0.40-1_all.deb
Debian	999	all	tomcat9	9.0.40-1	tomcat9_9.0.40-1_all.deb

03 Dec 2020 18:30Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

EPSS0.24622