1. CVE-Search
  2. CVE-2020-1938
ID CVE-2020-1938
Summary When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.
References
Vulnerable Configurations
  • cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.0:rc4:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.0:rc4:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.5:beta:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.39:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.40:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.41:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.42:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.43:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.44:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.45:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.46:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.47:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.48:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.49:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.50:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.55:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.56:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.57:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.58:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.59:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.61:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.62:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.63:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.64:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.66:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.69:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.72:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.73:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.74:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.75:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.76:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.77:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.78:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.78:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.79:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.79:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.80:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.81:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.82:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.83:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.84:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.85:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.86:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.87:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.88:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.88:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.89:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.89:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.90:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.90:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.91:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.91:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.92:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.92:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.93:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.93:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.94:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.94:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.95:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.95:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.96:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.96:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.97:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.97:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.98:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.98:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:7.0.99:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:7.0.99:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m1:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m10:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m11:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m12:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m12:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m13:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m13:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m14:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m14:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m15:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m15:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m16:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m16:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m17:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m17:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m18:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m18:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m19:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m19:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m2:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m20:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m20:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m21:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m21:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m22:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m22:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m23:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m23:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m24:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m24:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m25:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m25:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m26:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m26:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m27:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m27:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m3:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m4:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m5:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m6:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m7:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m8:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m8:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:m9:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:m9:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*
    cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:geode:1.12.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:transportation_management:6.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:-:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:-:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:health_sciences_empirica_signal:7.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:health_sciences_empirica_signal:7.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:-:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:-:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:8.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:8.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:16.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:17.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:19.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:19.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:19.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:19.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:19.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:19.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:19.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:19.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:20.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:20.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:20.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:20.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:siebel_ui_framework:20.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:siebel_ui_framework:20.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:workload_manager:12.2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
    cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:good_control:-:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:good_control:-:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:good_control:5.2.58.38:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:good_control:5.2.58.38:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:workspaces_server:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:workspaces_server:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:workspaces_server:7.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:workspaces_server:7.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:workspaces_server:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:workspaces_server:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:blackberry:workspaces_server:8.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:blackberry:workspaces_server:8.1.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 12-07-2022 - 17:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
advisories
  • bugzilla
    id 1806398
    title CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
    oval
    OR
    • comment Red Hat Enterprise Linux must be installed
      oval oval:com.redhat.rhba:tst:20070304026
    • AND
      • comment Red Hat Enterprise Linux 7 is installed
        oval oval:com.redhat.rhba:tst:20150364027
      • OR
        • AND
          • comment tomcat is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855001
          • comment tomcat is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686002
        • AND
          • comment tomcat-admin-webapps is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855003
          • comment tomcat-admin-webapps is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686004
        • AND
          • comment tomcat-docs-webapp is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855005
          • comment tomcat-docs-webapp is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686006
        • AND
          • comment tomcat-el-2.2-api is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855007
          • comment tomcat-el-2.2-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686008
        • AND
          • comment tomcat-javadoc is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855009
          • comment tomcat-javadoc is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686010
        • AND
          • comment tomcat-jsp-2.2-api is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855011
          • comment tomcat-jsp-2.2-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686012
        • AND
          • comment tomcat-jsvc is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855013
          • comment tomcat-jsvc is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686014
        • AND
          • comment tomcat-lib is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855015
          • comment tomcat-lib is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686016
        • AND
          • comment tomcat-servlet-3.0-api is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855017
          • comment tomcat-servlet-3.0-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686018
        • AND
          • comment tomcat-webapps is earlier than 0:7.0.76-11.el7_7
            oval oval:com.redhat.rhsa:tst:20200855019
          • comment tomcat-webapps is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20140686020
    rhsa
    id RHSA-2020:0855
    released 2020-03-17
    severity Important
    title RHSA-2020:0855: tomcat security update (Important)
  • bugzilla
    id 1806398
    title CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
    oval
    OR
    • comment Red Hat Enterprise Linux must be installed
      oval oval:com.redhat.rhba:tst:20070304026
    • AND
      • comment Red Hat Enterprise Linux 6 is installed
        oval oval:com.redhat.rhba:tst:20111656003
      • OR
        • AND
          • comment tomcat6 is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912001
          • comment tomcat6 is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335002
        • AND
          • comment tomcat6-admin-webapps is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912003
          • comment tomcat6-admin-webapps is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335004
        • AND
          • comment tomcat6-docs-webapp is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912005
          • comment tomcat6-docs-webapp is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335006
        • AND
          • comment tomcat6-el-2.1-api is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912007
          • comment tomcat6-el-2.1-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335008
        • AND
          • comment tomcat6-javadoc is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912009
          • comment tomcat6-javadoc is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335010
        • AND
          • comment tomcat6-jsp-2.1-api is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912011
          • comment tomcat6-jsp-2.1-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335012
        • AND
          • comment tomcat6-lib is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912013
          • comment tomcat6-lib is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335014
        • AND
          • comment tomcat6-servlet-2.5-api is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912015
          • comment tomcat6-servlet-2.5-api is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335018
        • AND
          • comment tomcat6-webapps is earlier than 0:6.0.24-114.el6_10
            oval oval:com.redhat.rhsa:tst:20200912017
          • comment tomcat6-webapps is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20110335020
    rhsa
    id RHSA-2020:0912
    released 2020-03-23
    severity Important
    title RHSA-2020:0912: tomcat6 security update (Important)
rpms
  • tomcat-0:7.0.76-11.el7_7
  • tomcat-admin-webapps-0:7.0.76-11.el7_7
  • tomcat-docs-webapp-0:7.0.76-11.el7_7
  • tomcat-el-2.2-api-0:7.0.76-11.el7_7
  • tomcat-javadoc-0:7.0.76-11.el7_7
  • tomcat-jsp-2.2-api-0:7.0.76-11.el7_7
  • tomcat-jsvc-0:7.0.76-11.el7_7
  • tomcat-lib-0:7.0.76-11.el7_7
  • tomcat-servlet-3.0-api-0:7.0.76-11.el7_7
  • tomcat-webapps-0:7.0.76-11.el7_7
  • tomcat-native-0:1.2.23-21.redhat_21.ep7.el6
  • tomcat-native-0:1.2.23-21.redhat_21.ep7.el7
  • tomcat-native-debuginfo-0:1.2.23-21.redhat_21.ep7.el6
  • tomcat-native-debuginfo-0:1.2.23-21.redhat_21.ep7.el7
  • tomcat7-0:7.0.70-38.ep7.el6
  • tomcat7-0:7.0.70-38.ep7.el7
  • tomcat7-admin-webapps-0:7.0.70-38.ep7.el6
  • tomcat7-admin-webapps-0:7.0.70-38.ep7.el7
  • tomcat7-docs-webapp-0:7.0.70-38.ep7.el6
  • tomcat7-docs-webapp-0:7.0.70-38.ep7.el7
  • tomcat7-el-2.2-api-0:7.0.70-38.ep7.el6
  • tomcat7-el-2.2-api-0:7.0.70-38.ep7.el7
  • tomcat7-javadoc-0:7.0.70-38.ep7.el6
  • tomcat7-javadoc-0:7.0.70-38.ep7.el7
  • tomcat7-jsp-2.2-api-0:7.0.70-38.ep7.el6
  • tomcat7-jsp-2.2-api-0:7.0.70-38.ep7.el7
  • tomcat7-jsvc-0:7.0.70-38.ep7.el6
  • tomcat7-jsvc-0:7.0.70-38.ep7.el7
  • tomcat7-lib-0:7.0.70-38.ep7.el6
  • tomcat7-lib-0:7.0.70-38.ep7.el7
  • tomcat7-log4j-0:7.0.70-38.ep7.el6
  • tomcat7-log4j-0:7.0.70-38.ep7.el7
  • tomcat7-selinux-0:7.0.70-38.ep7.el6
  • tomcat7-selinux-0:7.0.70-38.ep7.el7
  • tomcat7-servlet-3.0-api-0:7.0.70-38.ep7.el6
  • tomcat7-servlet-3.0-api-0:7.0.70-38.ep7.el7
  • tomcat7-webapps-0:7.0.70-38.ep7.el6
  • tomcat7-webapps-0:7.0.70-38.ep7.el7
  • tomcat8-0:8.0.36-42.ep7.el6
  • tomcat8-0:8.0.36-42.ep7.el7
  • tomcat8-admin-webapps-0:8.0.36-42.ep7.el6
  • tomcat8-admin-webapps-0:8.0.36-42.ep7.el7
  • tomcat8-docs-webapp-0:8.0.36-42.ep7.el6
  • tomcat8-docs-webapp-0:8.0.36-42.ep7.el7
  • tomcat8-el-2.2-api-0:8.0.36-42.ep7.el6
  • tomcat8-el-2.2-api-0:8.0.36-42.ep7.el7
  • tomcat8-javadoc-0:8.0.36-42.ep7.el6
  • tomcat8-javadoc-0:8.0.36-42.ep7.el7
  • tomcat8-jsp-2.3-api-0:8.0.36-42.ep7.el6
  • tomcat8-jsp-2.3-api-0:8.0.36-42.ep7.el7
  • tomcat8-jsvc-0:8.0.36-42.ep7.el6
  • tomcat8-jsvc-0:8.0.36-42.ep7.el7
  • tomcat8-lib-0:8.0.36-42.ep7.el6
  • tomcat8-lib-0:8.0.36-42.ep7.el7
  • tomcat8-log4j-0:8.0.36-42.ep7.el6
  • tomcat8-log4j-0:8.0.36-42.ep7.el7
  • tomcat8-selinux-0:8.0.36-42.ep7.el6
  • tomcat8-selinux-0:8.0.36-42.ep7.el7
  • tomcat8-servlet-3.1-api-0:8.0.36-42.ep7.el6
  • tomcat8-servlet-3.1-api-0:8.0.36-42.ep7.el7
  • tomcat8-webapps-0:8.0.36-42.ep7.el6
  • tomcat8-webapps-0:8.0.36-42.ep7.el7
  • tomcat6-0:6.0.24-114.el6_10
  • tomcat6-admin-webapps-0:6.0.24-114.el6_10
  • tomcat6-docs-webapp-0:6.0.24-114.el6_10
  • tomcat6-el-2.1-api-0:6.0.24-114.el6_10
  • tomcat6-javadoc-0:6.0.24-114.el6_10
  • tomcat6-jsp-2.1-api-0:6.0.24-114.el6_10
  • tomcat6-lib-0:6.0.24-114.el6_10
  • tomcat6-servlet-2.5-api-0:6.0.24-114.el6_10
  • tomcat6-webapps-0:6.0.24-114.el6_10
  • jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el5
  • jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el6
  • jbossweb-0:7.5.30-2.Final_redhat_2.1.ep6.el7
  • jws5-tomcat-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-admin-webapps-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-admin-webapps-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-admin-webapps-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-docs-webapp-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-docs-webapp-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-docs-webapp-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-el-3.0-api-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-el-3.0-api-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-el-3.0-api-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-javadoc-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-javadoc-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-javadoc-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-jsp-2.3-api-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-jsp-2.3-api-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-jsp-2.3-api-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-lib-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-lib-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-lib-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-native-0:1.2.23-4.redhat_4.el6jws
  • jws5-tomcat-native-0:1.2.23-4.redhat_4.el7jws
  • jws5-tomcat-native-0:1.2.23-4.redhat_4.el8jws
  • jws5-tomcat-native-debuginfo-0:1.2.23-4.redhat_4.el6jws
  • jws5-tomcat-native-debuginfo-0:1.2.23-4.redhat_4.el7jws
  • jws5-tomcat-native-debuginfo-0:1.2.23-4.redhat_4.el8jws
  • jws5-tomcat-selinux-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-selinux-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-selinux-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-servlet-4.0-api-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-servlet-4.0-api-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-servlet-4.0-api-0:9.0.30-3.redhat_4.1.el8jws
  • jws5-tomcat-webapps-0:9.0.30-3.redhat_4.1.el6jws
  • jws5-tomcat-webapps-0:9.0.30-3.redhat_4.1.el7jws
  • jws5-tomcat-webapps-0:9.0.30-3.redhat_4.1.el8jws
  • glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el6
  • hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el6
  • ironjacamar-common-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-common-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-common-spi-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-core-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-core-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-deployers-common-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-jdbc-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-spec-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • ironjacamar-validator-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el6
  • jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el6
  • jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el6
  • jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el6
  • jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el6
  • jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el6
  • jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el6
  • weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el6
  • glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el7
  • hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el7
  • ironjacamar-common-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-common-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-common-spi-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-core-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-core-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-deployers-common-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-jdbc-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-spec-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • ironjacamar-validator-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el7
  • jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el7
  • jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el7
  • jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el7
  • jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el7
  • jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el7
  • jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el7
  • weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el7
  • glassfish-jsf12-eap6-0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el5
  • hornetq-0:2.3.25-29.SP31_redhat_00001.1.ep6.el5
  • ironjacamar-common-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-common-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-common-spi-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-core-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-core-impl-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-deployers-common-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-jdbc-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-spec-api-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • ironjacamar-validator-eap6-0:1.0.44-1.Final_redhat_00001.1.ep6.el5
  • jbosgi-repository-0:2.1.0-3.Final_redhat_3.1.ep6.el5
  • jboss-as-appclient-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-cli-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-client-all-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-clustering-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-cmp-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-connector-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-controller-client-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-core-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-deployment-repository-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-deployment-scanner-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-domain-http-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-domain-management-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-ee-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-ee-deployment-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-ejb3-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-embedded-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-host-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jacorb-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jaxr-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jaxrs-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jdr-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jpa-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jsf-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-jsr77-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-logging-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-mail-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-management-client-content-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-messaging-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-modcluster-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-naming-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-network-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-osgi-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-osgi-configadmin-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-osgi-service-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-picketlink-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-platform-mbean-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-pojo-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-process-controller-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-protocol-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-remoting-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-sar-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-security-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-server-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-system-jmx-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-threads-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-transactions-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-version-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-web-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-webservices-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-weld-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-as-xts-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jboss-remoting3-jmx-0:1.1.4-2.Final_redhat_00001.1.ep6.el5
  • jbossas-appclient-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-bundles-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-core-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-domain-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-javadocs-0:7.5.23-2.Final_redhat_00002.1.ep6.el5
  • jbossas-modules-eap-0:7.5.23-3.Final_redhat_00002.1.ep6.el5
  • jbossas-product-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-standalone-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossas-welcome-content-eap-0:7.5.23-4.Final_redhat_00002.1.ep6.el5
  • jbossweb-0:7.5.31-1.Final_redhat_1.1.ep6.el5
  • weld-core-0:1.1.34-2.Final_redhat_2.1.ep6.el5
  • tomcat-0:7.0.76-10.el7_6
  • tomcat-admin-webapps-0:7.0.76-10.el7_6
  • tomcat-docs-webapp-0:7.0.76-10.el7_6
  • tomcat-el-2.2-api-0:7.0.76-10.el7_6
  • tomcat-javadoc-0:7.0.76-10.el7_6
  • tomcat-jsp-2.2-api-0:7.0.76-10.el7_6
  • tomcat-jsvc-0:7.0.76-10.el7_6
  • tomcat-lib-0:7.0.76-10.el7_6
  • tomcat-servlet-3.0-api-0:7.0.76-10.el7_6
  • tomcat-webapps-0:7.0.76-10.el7_6
refmap via4
confirm
debian
  • DSA-4673
  • DSA-4680
fedora
  • FEDORA-2020-04ac174fa9
  • FEDORA-2020-0e42878ba7
  • FEDORA-2020-c870aa8378
gentoo GLSA-202003-43
misc
mlist
  • [debian-lts-announce] 20200304 [SECURITY] [DLA 2133-1] tomcat7 security update
  • [debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update
  • [geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12
  • [httpd-bugs] 20200319 [Bug 53098] mod_proxy_ajp: patch to set worker secret passed to tomcat
  • [ofbiz-commits] 20200227 [ofbiz-plugins] branch release17.12 updated: Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938) (OFBIZ-11407)
  • [ofbiz-notifications] 20200225 [jira] [Commented] (OFBIZ-11407) Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938)
  • [ofbiz-notifications] 20200225 [jira] [Updated] (OFBIZ-11407) Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938)
  • [ofbiz-notifications] 20200227 [jira] [Commented] (OFBIZ-11407) Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938)
  • [ofbiz-notifications] 20200228 [jira] [Comment Edited] (OFBIZ-11407) Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938)
  • [ofbiz-notifications] 20200228 [jira] [Commented] (OFBIZ-11407) Upgrade Tomcat from 9.0.29 to 9.0.31 (CVE-2020-1938)
  • [ofbiz-notifications] 20200628 [jira] [Created] (OFBIZ-11847) CLONE - Upgrade Tomcat from 9.0.34 to 9.0.36 (CVE-2020-11996)
  • [ofbiz-notifications] 20200628 [jira] [Updated] (OFBIZ-11847) CLONE - Upgrade Tomcat from 9.0.34 to 9.0.36 (CVE-2020-11996)
  • [tomcat-announce] 20200224 [SECURITY] CVE-2020-1938 AJP Request Injection and potential Remote Code Execution
  • [tomcat-dev] 20200304 Re: Tagging 10.0.x, 9.0.x, 8.5.x
  • [tomcat-dev] 20200309 [Bug 64206] Answer file not being used
  • [tomcat-dev] 20200625 svn commit: r1879208 - in /tomcat/site/trunk: docs/security-10.html docs/security-8.html docs/security-9.html xdocs/security-10.xml xdocs/security-8.xml xdocs/security-9.xml
  • [tomcat-users] 20200301 Re: [SECURITY] CVE-2020-1938 AJP Request Injection and potential Remote Code Execution
  • [tomcat-users] 20200302 AW: [SECURITY] CVE-2020-1938 AJP Request Injection and potentialRemote Code Execution
  • [tomcat-users] 20200302 Re: AW: [SECURITY] CVE-2020-1938 AJP Request Injection and potentialRemote Code Execution
  • [tomcat-users] 20200302 Re: [SECURITY] CVE-2020-1938 AJP Request Injection and potential Remote Code Execution
  • [tomcat-users] 20200304 Re: Fix for CVE-2020-1938
  • [tomcat-users] 20200305 Aw: Re: Fix for CVE-2020-1938
  • [tomcat-users] 20200305 Re: Aw: Re: Fix for CVE-2020-1938
  • [tomcat-users] 20200309 Re: Apache Tomcat AJP File Inclusion Vulnerability (unauthenticated check)
  • [tomcat-users] 20200310 Aw: Re: Re: Fix for CVE-2020-1938
  • [tomcat-users] 20200310 Re: Re: Re: Fix for CVE-2020-1938
  • [tomcat-users] 20200413 RE: Alternatives for AJP
  • [tomee-commits] 20200320 [jira] [Created] (TOMEE-2789) TomEE plus is affected by CVE-2020-1938(BDSA-2020-0339) vulnerability.
  • [tomee-commits] 20200320 [jira] [Updated] (TOMEE-2789) TomEE plus(7.0.7) is affected by CVE-2020-1938(BDSA-2020-0339) vulnerability.
  • [tomee-commits] 20200323 [jira] [Commented] (TOMEE-2789) TomEE plus(7.0.7) is affected by CVE-2020-1938(BDSA-2020-0339) vulnerability.
  • [tomee-commits] 20201127 [jira] [Resolved] (TOMEE-2789) TomEE plus(7.0.7) is affected by CVE-2020-1938(BDSA-2020-0339) vulnerability.
  • [tomee-commits] 20201127 [jira] [Updated] (TOMEE-2789) TomEE plus(7.0.7) is affected by CVE-2020-1938(BDSA-2020-0339) vulnerability.
  • [tomee-dev] 20200311 CVE-2020-1938 on Tomcat 9.0.30 / TomEE 8.0.1
  • [tomee-dev] 20200311 Re: CVE-2020-1938 on Tomcat 9.0.30 / TomEE 8.0.1
  • [tomee-dev] 20200316 RE: CVE-2020-8840 on TomEE 8.0.1
  • [tomee-users] 20200723 Re: TomEE on Docker
suse
  • openSUSE-SU-2020:0345
  • openSUSE-SU-2020:0597
Last major update 12-07-2022 - 17:42
Published 24-02-2020 - 22:15
Last modified 12-07-2022 - 17:42
Back to Top