Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/439?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/439?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7", "type": "maven", "namespace": "org.apache.tomcat", "name": "tomcat", "version": "10.0.0-M7", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "10.1.55", "latest_non_vulnerable_version": "11.0.22", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7723?format=api", "vulnerability_id": "VCID-nstu-jfc5-3kgd", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13943", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93987", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93994", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93967", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93993", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13943" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat/commit/1bbc650cbc3f08d85a1ec6d803c47ae53a84f3bb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/1bbc650cbc3f08d85a1ec6d803c47ae53a84f3bb" }, { "reference_url": "https://github.com/apache/tomcat/commit/55911430df13f8c9998fbdee1f9716994d2db59b", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/55911430df13f8c9998fbdee1f9716994d2db59b" }, { "reference_url": "https://github.com/apache/tomcat/commit/9d7def063b47407a09a2f9202beed99f4dcb292a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/9d7def063b47407a09a2f9202beed99f4dcb292a" }, { "reference_url": "https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201016-0007", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20201016-0007" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201016-0007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20201016-0007/" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4835", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4835" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648", "reference_id": "1887648", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943", "reference_id": "CVE-2020-13943", "reference_type": "", "scores": [ { "value": "Moderate", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "reference_id": "CVE-2020-13943", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "reference_url": "https://github.com/advisories/GHSA-f268-65qc-98vg", "reference_id": "GHSA-f268-65qc-98vg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f268-65qc-98vg" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0494", "reference_id": "RHSA-2021:0494", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0495", "reference_id": "RHSA-2021:0495", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4012", "reference_id": "RHSA-2021:4012", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4012" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5134", "reference_id": "RHSA-2021:5134", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5134" }, { "reference_url": "https://usn.ubuntu.com/5360-1/", "reference_id": "USN-5360-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5360-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/440?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M8" } ], "aliases": [ "CVE-2020-13943", "GHSA-f268-65qc-98vg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nstu-jfc5-3kgd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9170?format=api", "vulnerability_id": "VCID-qvgx-r4rr-xugp", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-24122.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-24122.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-24122", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.61383", "scoring_system": "epss", "scoring_elements": "0.98357", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.61383", "scoring_system": "epss", "scoring_elements": "0.98358", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.61383", "scoring_system": "epss", "scoring_elements": "0.98352", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-24122" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat/commit/7f004ac4531c45f9a2a2d1470561fe135cf27bc2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/7f004ac4531c45f9a2a2d1470561fe135cf27bc2" }, { "reference_url": "https://github.com/apache/tomcat/commit/800b03140e640f8892f27021e681645e8e320177", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/800b03140e640f8892f27021e681645e8e320177" }, { "reference_url": "https://github.com/apache/tomcat/commit/920dddbdb981f92e8d5872a4bb126a10af5ca8a9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/920dddbdb981f92e8d5872a4bb126a10af5ca8a9" }, { "reference_url": "https://github.com/apache/tomcat/commit/935fc5582dc25ae10bab6f9d5629ff8d996cb533", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/935fc5582dc25ae10bab6f9d5629ff8d996cb533" }, { "reference_url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r7382e1e35b9bc7c8f320b90ad77e74c13172d08034e20c18000fe710@%3Cdev.tomee.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r7382e1e35b9bc7c8f320b90ad77e74c13172d08034e20c18000fe710@%3Cdev.tomee.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r776c64337495bf28b7d5597268114a888e3fad6045c40a0da0c66d4d@%3Cdev.tomee.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r776c64337495bf28b7d5597268114a888e3fad6045c40a0da0c66d4d@%3Cdev.tomee.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r7e0bb9ea415724550e2b325e143b23e269579e54d66fcd7754bd0c20@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r7e0bb9ea415724550e2b325e143b23e269579e54d66fcd7754bd0c20@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rb32a73b7cb919d4f44a2596b6b951274c0004fc8b0e393d6829a45f9@%3Cusers.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rb32a73b7cb919d4f44a2596b6b951274c0004fc8b0e393d6829a45f9@%3Cusers.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210212-0008", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210212-0008" }, { "reference_url": "https://tomcat.apache.org/security-10.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-10.html" }, { "reference_url": "https://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-7.html" }, { "reference_url": "https://tomcat.apache.org/security-8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-8.html" }, { "reference_url": "https://tomcat.apache.org/security-9.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-9.html" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/01/14/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/01/14/1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209", "reference_id": "1917209", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "reference_url": "https://security.archlinux.org/AVG-1452", "reference_id": "AVG-1452", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1452" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24122", "reference_id": "CVE-2021-24122", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24122" }, { "reference_url": "https://github.com/advisories/GHSA-2rvv-w9r2-rg7m", "reference_id": "GHSA-2rvv-w9r2-rg7m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2rvv-w9r2-rg7m" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0494", "reference_id": "RHSA-2021:0494", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0495", "reference_id": "RHSA-2021:0495", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3425", "reference_id": "RHSA-2021:3425", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3425" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5532", "reference_id": "RHSA-2022:5532", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5532" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/414?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bbye-dcrb-t3ev" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M10" } ], "aliases": [ "CVE-2021-24122", "GHSA-2rvv-w9r2-rg7m" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qvgx-r4rr-xugp" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7720?format=api", "vulnerability_id": "VCID-euv9-huaz-y3d1", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13934.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13934", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.2338", "scoring_system": "epss", "scoring_elements": "0.96093", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.2338", "scoring_system": "epss", "scoring_elements": "0.96094", "published_at": "2026-06-13T12:55:00Z" }, { "value": "0.2338", "scoring_system": "epss", "scoring_elements": "0.96096", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.2338", "scoring_system": "epss", "scoring_elements": "0.96081", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13934" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat/commit/172977f04a5215128f1e278a688983dcd230f399", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat/commit/172977f04a5215128f1e278a688983dcd230f399" }, { "reference_url": "https://github.com/apache/tomcat/commit/923d834500802a61779318911d7898bd85fc950e", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat/commit/923d834500802a61779318911d7898bd85fc950e" }, { "reference_url": "https://github.com/apache/tomcat/commit/c9167ae30f3b03b112f3d81772e3450b7d0e6a25", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat/commit/c9167ae30f3b03b112f3d81772e3450b7d0e6a25" }, { "reference_url": "https://lists.apache.org/thread.html/r61f411cf82488d6ec213063fc15feeeb88e31b0ca9c29652ee4f962e%40%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r61f411cf82488d6ec213063fc15feeeb88e31b0ca9c29652ee4f962e%40%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/ra072b1f786e7d139e86f1d1145572e0ff71cef38a96d9c6f5362aac8@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/ra072b1f786e7d139e86f1d1145572e0ff71cef38a96d9c6f5362aac8@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200724-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20200724-0003" }, { "reference_url": "https://usn.ubuntu.com/4596-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4596-1" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4727", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4727" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857040", "reference_id": "1857040", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857040" }, { "reference_url": "https://security.archlinux.org/AVG-1205", "reference_id": "AVG-1205", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13934", "reference_id": "CVE-2020-13934", "reference_type": "", "scores": [ { "value": "Moderate", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13934" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13934", "reference_id": "CVE-2020-13934", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13934" }, { "reference_url": "https://github.com/advisories/GHSA-vf77-8h7g-gghp", "reference_id": "GHSA-vf77-8h7g-gghp", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vf77-8h7g-gghp" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3306", "reference_id": "RHSA-2020:3306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3308", "reference_id": "RHSA-2020:3308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3308" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3806", "reference_id": "RHSA-2020:3806", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3806" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3140", "reference_id": "RHSA-2021:3140", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3140" }, { "reference_url": "https://usn.ubuntu.com/4596-1/", "reference_id": "USN-4596-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4596-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/734?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.56", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-euv9-huaz-y3d1" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-m3py-3ba2-jkg7" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-p65m-6crd-bufr" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-qxfb-yg6b-nfda" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.56" }, { "url": "http://public2.vulnerablecode.io/api/packages/731?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.57", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-m3py-3ba2-jkg7" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-qxfb-yg6b-nfda" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/584?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-euv9-huaz-y3d1" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-ngy5-k9cv-rkbn" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-p65m-6crd-bufr" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-vnfg-9em7-u7ee" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/581?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-ngy5-k9cv-rkbn" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-vnfg-9em7-u7ee" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/442?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-euv9-huaz-y3d1" }, { "vulnerability": "VCID-p65m-6crd-bufr" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M6" }, { "url": "http://public2.vulnerablecode.io/api/packages/439?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7" } ], "aliases": [ "CVE-2020-13934", "GHSA-vf77-8h7g-gghp" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-euv9-huaz-y3d1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7723?format=api", "vulnerability_id": "VCID-nstu-jfc5-3kgd", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13943.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13943", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93987", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93994", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93967", "published_at": "2026-06-11T12:55:00Z" }, { "value": "0.12123", "scoring_system": "epss", "scoring_elements": "0.93993", "published_at": "2026-06-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13943" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat/commit/1bbc650cbc3f08d85a1ec6d803c47ae53a84f3bb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/1bbc650cbc3f08d85a1ec6d803c47ae53a84f3bb" }, { "reference_url": "https://github.com/apache/tomcat/commit/55911430df13f8c9998fbdee1f9716994d2db59b", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/55911430df13f8c9998fbdee1f9716994d2db59b" }, { "reference_url": "https://github.com/apache/tomcat/commit/9d7def063b47407a09a2f9202beed99f4dcb292a", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/9d7def063b47407a09a2f9202beed99f4dcb292a" }, { "reference_url": "https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201016-0007", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20201016-0007" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201016-0007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20201016-0007/" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4835", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4835" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648", "reference_id": "1887648", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943", "reference_id": "CVE-2020-13943", "reference_type": "", "scores": [ { "value": "Moderate", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "reference_id": "CVE-2020-13943", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "reference_url": "https://github.com/advisories/GHSA-f268-65qc-98vg", "reference_id": "GHSA-f268-65qc-98vg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f268-65qc-98vg" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0494", "reference_id": "RHSA-2021:0494", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0495", "reference_id": "RHSA-2021:0495", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4012", "reference_id": "RHSA-2021:4012", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4012" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5134", "reference_id": "RHSA-2021:5134", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5134" }, { "reference_url": "https://usn.ubuntu.com/5360-1/", "reference_id": "USN-5360-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5360-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/731?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.57", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-m3py-3ba2-jkg7" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-qxfb-yg6b-nfda" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/732?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.58", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-m3py-3ba2-jkg7" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-qxfb-yg6b-nfda" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.58" }, { "url": "http://public2.vulnerablecode.io/api/packages/582?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.38", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-ngy5-k9cv-rkbn" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-vnfg-9em7-u7ee" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.38" }, { "url": "http://public2.vulnerablecode.io/api/packages/439?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7" }, { "url": "http://public2.vulnerablecode.io/api/packages/440?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M8" } ], "aliases": [ "CVE-2020-13943", "GHSA-f268-65qc-98vg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nstu-jfc5-3kgd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7721?format=api", "vulnerability_id": "VCID-p65m-6crd-bufr", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13935.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13935", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.92155", "scoring_system": "epss", "scoring_elements": "0.99728", "published_at": "2026-06-12T12:55:00Z" }, { "value": "0.92155", "scoring_system": "epss", "scoring_elements": "0.99727", "published_at": "2026-06-14T12:55:00Z" }, { "value": "0.92155", "scoring_system": "epss", "scoring_elements": "0.99726", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-13935" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat/commit/12d715676038efbf9c728af10163f8277fc019d5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/12d715676038efbf9c728af10163f8277fc019d5" }, { "reference_url": "https://github.com/apache/tomcat/commit/1c1c77b0efb667cea80b532440b44cea1dc427c3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/1c1c77b0efb667cea80b532440b44cea1dc427c3" }, { "reference_url": "https://github.com/apache/tomcat/commit/40fa74c74822711ab878079d0a69f7357926723d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/40fa74c74822711ab878079d0a69f7357926723d" }, { "reference_url": "https://github.com/apache/tomcat/commit/4c04982870d6e730c38e21e58fb653b7cf723784", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/4c04982870d6e730c38e21e58fb653b7cf723784" }, { "reference_url": "https://github.com/apache/tomcat/commit/f9f75c14678b68633f79030ddf4ff827f014cc84", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/f9f75c14678b68633f79030ddf4ff827f014cc84" }, { "reference_url": "https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200724-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20200724-0003" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200724-0003/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20200724-0003/" }, { "reference_url": "https://tomcat.apache.org/security-10.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-10.html" }, { "reference_url": "https://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-7.html" }, { "reference_url": "https://tomcat.apache.org/security-8.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-8.html" }, { "reference_url": "https://tomcat.apache.org/security-9.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tomcat.apache.org/security-9.html" }, { "reference_url": "https://usn.ubuntu.com/4448-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4448-1" }, { "reference_url": "https://usn.ubuntu.com/4448-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4448-1/" }, { "reference_url": "https://usn.ubuntu.com/4596-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/4596-1" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4727", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4727" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857024", "reference_id": "1857024", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857024" }, { "reference_url": "https://security.archlinux.org/AVG-1205", "reference_id": "AVG-1205", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13935", "reference_id": "CVE-2020-13935", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13935" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13935", "reference_id": "CVE-2020-13935", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13935" }, { "reference_url": "https://github.com/advisories/GHSA-m7jv-hq7h-mq7c", "reference_id": "GHSA-m7jv-hq7h-mq7c", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m7jv-hq7h-mq7c" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3303", "reference_id": "RHSA-2020:3303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3305", "reference_id": "RHSA-2020:3305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3306", "reference_id": "RHSA-2020:3306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3308", "reference_id": "RHSA-2020:3308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3308" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3382", "reference_id": "RHSA-2020:3382", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3382" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3383", "reference_id": "RHSA-2020:3383", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3383" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:3806", "reference_id": "RHSA-2020:3806", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:3806" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4004", "reference_id": "RHSA-2020:4004", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4004" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3140", "reference_id": "RHSA-2021:3140", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3140" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5458", "reference_id": "RHSA-2022:5458", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5458" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5459", "reference_id": "RHSA-2022:5459", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5459" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5460", "reference_id": "RHSA-2022:5460", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5460" }, { "reference_url": "https://usn.ubuntu.com/4596-1/", "reference_id": "USN-4596-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4596-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/891?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@7.0.105", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yg5s-2fsb-gub2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.105" }, { "url": "http://public2.vulnerablecode.io/api/packages/731?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@8.5.57", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-m3py-3ba2-jkg7" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-qxfb-yg6b-nfda" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/581?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16sq-3qm1-kqb2" }, { "vulnerability": "VCID-2hmq-5245-jyaf" }, { "vulnerability": "VCID-2n2k-sh22-fkfw" }, { "vulnerability": "VCID-3kn9-yxww-ryh4" }, { "vulnerability": "VCID-697g-gcg9-zyaa" }, { "vulnerability": "VCID-6kab-xsqw-37ed" }, { "vulnerability": "VCID-6wqu-jupw-tyhu" }, { "vulnerability": "VCID-7wr9-uez1-8bdg" }, { "vulnerability": "VCID-97et-ubnp-wqcy" }, { "vulnerability": "VCID-9xyf-k9wq-g7b9" }, { "vulnerability": "VCID-dhxd-kknv-9qb7" }, { "vulnerability": "VCID-dj7q-4map-ebg4" }, { "vulnerability": "VCID-dx14-ejnx-37ad" }, { "vulnerability": "VCID-hv33-kv9q-gugf" }, { "vulnerability": "VCID-keh1-ycs9-ybdd" }, { "vulnerability": "VCID-ngy5-k9cv-rkbn" }, { "vulnerability": "VCID-nj9t-gdm3-6ycn" }, { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-p4j1-xp15-t3b8" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" }, { "vulnerability": "VCID-r9fd-ndvw-ekfa" }, { "vulnerability": "VCID-s2kf-jwgc-pfas" }, { "vulnerability": "VCID-t8tc-zb3w-57gv" }, { "vulnerability": "VCID-tvrz-n2kd-pba4" }, { "vulnerability": "VCID-uyc3-3cnp-wqf3" }, { "vulnerability": "VCID-v5zf-qfdq-kbbp" }, { "vulnerability": "VCID-vfh6-rc99-e3bf" }, { "vulnerability": "VCID-vnfg-9em7-u7ee" }, { "vulnerability": "VCID-yjb8-hdqu-4fe5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/439?format=api", "purl": "pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-nstu-jfc5-3kgd" }, { "vulnerability": "VCID-qvgx-r4rr-xugp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7" } ], "aliases": [ "CVE-2020-13935", "GHSA-m7jv-hq7h-mq7c" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p65m-6crd-bufr" } ], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.0.0-M7" }