PT-2020-5486

🗓️ 05 Jul 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Tomcat h2c direct connections can cause OutOfMemoryError after HTTP/2 upgrade, risking denial of service; upgrade to fixed versions.

Reporter	Title	Published	Views	Family All 10233
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2016-3092)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses uthentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat.	9 Jul 202507:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Mar 202503:41	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in HTTP/2 protocol used by Netty on IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-44487)	5 Apr 202415:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Apache Tomcat vulnerabilities (CVE-2025-48976, CVE-2025-48988)	17 Jul 202518:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities	6 Jul 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2021-30640	25 Jan 202207:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in WebSphere Application Server Liberty may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-24998).	20 Jun 202314:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple IBM Websphere Application Server (WAS) vulnerabilities (CVE-2016-3092, CVE-2016-5986, CVE-2016-5983 )	18 Jun 201801:34	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2015-5345
osv	www.osv.dev/vulnerability/GHSA-vf77-8h7g-gghp
suse	www.suse.com/support/update/announcement/2020/suse-su-20202037-1
bugzilla	www.bugzilla.suse.com/1258371
osv	www.osv.dev/vulnerability/openSUSE-SU-2020:1102-1
bugzilla	www.bugzilla.suse.com/1246318
cve	www.cve.org/CVERecord
suse	www.suse.com/security/cve/CVE-2013-1976
oracle	www.oracle.com/security-alerts/cpuApr2021.html
suse	www.suse.com/security/cve/CVE-2019-17563

26 Mar 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 27.8

CVSS 39.8

CVSS 3.19.8 - 10

EPSS0.99999

SSVC