4.3

CVE-2020-13943

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ Tomcat Version8.5.0
Apache ≫ Tomcat Version8.5.1
Apache ≫ Tomcat Version8.5.2
Apache ≫ Tomcat Version8.5.3
Apache ≫ Tomcat Version8.5.4
Apache ≫ Tomcat Version8.5.5
Apache ≫ Tomcat Version8.5.6
Apache ≫ Tomcat Version8.5.7
Apache ≫ Tomcat Version8.5.8
Apache ≫ Tomcat Version8.5.9
Apache ≫ Tomcat Version8.5.10
Apache ≫ Tomcat Version8.5.11
Apache ≫ Tomcat Version8.5.12
Apache ≫ Tomcat Version8.5.13
Apache ≫ Tomcat Version8.5.14
Apache ≫ Tomcat Version8.5.15
Apache ≫ Tomcat Version8.5.16
Apache ≫ Tomcat Version8.5.17
Apache ≫ Tomcat Version8.5.18
Apache ≫ Tomcat Version8.5.19
Apache ≫ Tomcat Version8.5.20
Apache ≫ Tomcat Version8.5.21
Apache ≫ Tomcat Version8.5.22
Apache ≫ Tomcat Version8.5.23
Apache ≫ Tomcat Version8.5.24
Apache ≫ Tomcat Version8.5.25
Apache ≫ Tomcat Version8.5.26
Apache ≫ Tomcat Version8.5.27
Apache ≫ Tomcat Version8.5.28
Apache ≫ Tomcat Version8.5.29
Apache ≫ Tomcat Version8.5.30
Apache ≫ Tomcat Version8.5.31
Apache ≫ Tomcat Version8.5.32
Apache ≫ Tomcat Version8.5.33
Apache ≫ Tomcat Version8.5.34
Apache ≫ Tomcat Version8.5.35
Apache ≫ Tomcat Version8.5.36
Apache ≫ Tomcat Version8.5.37
Apache ≫ Tomcat Version8.5.38
Apache ≫ Tomcat Version8.5.39
Apache ≫ Tomcat Version8.5.40
Apache ≫ Tomcat Version8.5.41
Apache ≫ Tomcat Version8.5.42
Apache ≫ Tomcat Version8.5.43
Apache ≫ Tomcat Version8.5.44
Apache ≫ Tomcat Version8.5.45
Apache ≫ Tomcat Version8.5.46
Apache ≫ Tomcat Version8.5.47
Apache ≫ Tomcat Version8.5.48
Apache ≫ Tomcat Version8.5.49
Apache ≫ Tomcat Version8.5.50
Apache ≫ Tomcat Version8.5.51
Apache ≫ Tomcat Version8.5.52
Apache ≫ Tomcat Version8.5.53
Apache ≫ Tomcat Version8.5.54
Apache ≫ Tomcat Version8.5.55
Apache ≫ Tomcat Version8.5.56
Apache ≫ Tomcat Version8.5.57
Apache ≫ Tomcat Version9.0.0 Updatemilestone10
Apache ≫ Tomcat Version9.0.0 Updatemilestone11
Apache ≫ Tomcat Version9.0.0 Updatemilestone12
Apache ≫ Tomcat Version9.0.0 Updatemilestone13
Apache ≫ Tomcat Version9.0.0 Updatemilestone14
Apache ≫ Tomcat Version9.0.0 Updatemilestone15
Apache ≫ Tomcat Version9.0.0 Updatemilestone16
Apache ≫ Tomcat Version9.0.0 Updatemilestone17
Apache ≫ Tomcat Version9.0.0 Updatemilestone18
Apache ≫ Tomcat Version9.0.0 Updatemilestone19
Apache ≫ Tomcat Version9.0.0 Updatemilestone20
Apache ≫ Tomcat Version9.0.0 Updatemilestone21
Apache ≫ Tomcat Version9.0.0 Updatemilestone22
Apache ≫ Tomcat Version9.0.0 Updatemilestone23
Apache ≫ Tomcat Version9.0.0 Updatemilestone24
Apache ≫ Tomcat Version9.0.0 Updatemilestone25
Apache ≫ Tomcat Version9.0.0 Updatemilestone26
Apache ≫ Tomcat Version9.0.0 Updatemilestone27
Apache ≫ Tomcat Version9.0.0 Updatemilestone5
Apache ≫ Tomcat Version9.0.0 Updatemilestone6
Apache ≫ Tomcat Version9.0.0 Updatemilestone7
Apache ≫ Tomcat Version9.0.0 Updatemilestone8
Apache ≫ Tomcat Version9.0.0 Updatemilestone9
Apache ≫ Tomcat Version9.0.1
Apache ≫ Tomcat Version9.0.2
Apache ≫ Tomcat Version9.0.3
Apache ≫ Tomcat Version9.0.4
Apache ≫ Tomcat Version9.0.5
Apache ≫ Tomcat Version9.0.6
Apache ≫ Tomcat Version9.0.7
Apache ≫ Tomcat Version9.0.8
Apache ≫ Tomcat Version9.0.9
Apache ≫ Tomcat Version9.0.10
Apache ≫ Tomcat Version9.0.11
Apache ≫ Tomcat Version9.0.12
Apache ≫ Tomcat Version9.0.13
Apache ≫ Tomcat Version9.0.14
Apache ≫ Tomcat Version9.0.15
Apache ≫ Tomcat Version9.0.16
Apache ≫ Tomcat Version9.0.17
Apache ≫ Tomcat Version9.0.18
Apache ≫ Tomcat Version9.0.19
Apache ≫ Tomcat Version9.0.20
Apache ≫ Tomcat Version9.0.21
Apache ≫ Tomcat Version9.0.22
Apache ≫ Tomcat Version9.0.23
Apache ≫ Tomcat Version9.0.24
Apache ≫ Tomcat Version9.0.25
Apache ≫ Tomcat Version9.0.26
Apache ≫ Tomcat Version9.0.27
Apache ≫ Tomcat Version9.0.28
Apache ≫ Tomcat Version9.0.29
Apache ≫ Tomcat Version9.0.30
Apache ≫ Tomcat Version9.0.31
Apache ≫ Tomcat Version9.0.32
Apache ≫ Tomcat Version9.0.33
Apache ≫ Tomcat Version9.0.34
Apache ≫ Tomcat Version9.0.35
Apache ≫ Tomcat Version9.0.36
Apache ≫ Tomcat Version9.0.37
Apache ≫ Tomcat Version10.0.0 Updatemilestone1
Apache ≫ Tomcat Version10.0.0 Updatemilestone2
Apache ≫ Tomcat Version10.0.0 Updatemilestone3
Apache ≫ Tomcat Version10.0.0 Updatemilestone4
Apache ≫ Tomcat Version10.0.0 Updatemilestone5
Apache ≫ Tomcat Version10.0.0 Updatemilestone6
Apache ≫ Tomcat Version10.0.0 Updatemilestone7
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Oracle ≫ Sd-wan Edge Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 9.57% 0.926
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N