AZL-7384 CVE-2020-17527 affecting package tomcat 9.0.39-6

🗓️ 03 Dec 2020 19:15:12Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Tomcat versions eight five to ten could reuse a header from an HTTP two stream, risking leakage.

Reporter	Title	Published	Views	Family All 180
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	27 Jul 202116:25	–	ibm
IBM Security Bulletins	Security Bulletin: : App Connect Professional is affected by Apache Tomcat vulnerabilities.	19 Mar 202112:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-17527	25 Jan 202207:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
Tenable Nessus	Apache Tomcat < 10.0.0-M10 Multiple Vulnerabilities	14 Apr 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2023-010)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2020-1473) (deprecated)	18 Dec 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : tomcat8 (ALAS-2021-1473)	14 Jan 202100:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-17527

21 Apr 2026 04:34Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.10506

Tomcat versions header leakage hypertext version two data leakage stream reuse