ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4357 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.36)

🗓️ 08 Feb 2022 22:05:17Reported by Vulners OSVType

vulnersosv🔗 github.com👁 1 Views

CVE-2020-13935 in tomcat-embed-websocket.

Reporter	Title	Published	Views	Family All 253
GithubExploit	Exploit for Infinite Loop in Apache Tomcat	2 Nov 202014:48	–	githubexploit
GithubExploit	scagoat	17 Sep 202614:27	–	githubexploit
GithubExploit	pt-esign__Damn-vulnerable-sca	10 Aug 202620:56	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilities (Q12021)	29 Jan 202118:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202022:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Tomcat 7.099 (CVE-2020-13935)	31 Aug 202021:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	27 Oct 202013:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-13935	25 Jan 202207:37	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2020-13935)	30 Sep 202013:43	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects the IBM FlashSystem models 840 and 900	15 Apr 202117:44	–	ibm

25 Aug 2026 18:32Current

CVSS 25

CVSS 3.17.5

EPSS0.86608

SSVC

tomcat-embed-websocket CVE-2020-13935