Lucene search
FreeBSD676CA486-9C1E-11EA-8B5E-B42E99A1B9C3HistoryMay 12, 2020 - 12:00 a.m.
Apache Tomcat Remote Code Execution via session persistence
2020-05-1200:00:00
vuxml.freebsd.org
45
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.914
Percentile
99.0%
The Apache Software Foundation reports:
Under certain circumstances an attacker will be able to trigger remote code execution via deserialization of the file under their control
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1364-1)
2021-04-19 00:00:00
Debian: Security Advisory (DLA-2217-1)
2020-05-24 00:00:00
Apache Tomcat RCE Vulnerability (May 2020) - Linux
2020-05-25 00:00:00
nessus
nessus
Fedora 31 : 1:tomcat (2020-ce396e7d5c)
2020-06-23 00:00:00
Apache Tomcat 8.5.0 < 8.5.55
2020-05-22 00:00:00
Oracle Linux 7 : tomcat (ELSA-2020-2530)
2020-06-12 00:00:00
atlassian
atlassian
Upgrade Apache Tomcat 8.5.50 - version affected by CVE-2020-9484
2020-06-25 04:59:30
Upgrade Apache Tomcat 8.5.50 - version affected by CVE-2020-9484
2020-06-25 04:59:30
Update Tomcat to version 8.5.75 to address CVE-2020-9484/CVE-2022-23181
2022-02-08 16:45:17
gentoo
gentoo
Apache Tomcat: Remote code execution
2020-06-15 00:00:00
archlinux
archlinux
[ASA-202006-7] tomcat9: arbitrary code execution
2020-06-06 00:00:00
[ASA-202006-5] tomcat8: arbitrary code execution
2020-06-06 00:00:00
[ASA-202006-6] tomcat7: arbitrary code execution
2020-06-06 00:00:00
f5
f5
K03121171 : Apache Tomcat vulnerability CVE-2020-9484
2020-05-27 00:00:00
K28409053 : Apache Tomcat vulnerability CVE-2022-23181
2022-02-18 00:00:00
K73648110 : Apache Tomcat vulnerability CVE-2021-25329
2021-03-16 00:00:00
ibm
ibm
tomcat
tomcat
Fixed in Apache Tomcat 9.0.35
2020-05-11 00:00:00
Fixed in Apache Tomcat 10.0.0-M5
2020-05-11 00:00:00
Fixed in Apache Tomcat 7.0.104
2020-05-16 00:00:00
centos
centos
tomcat security update
2020-06-11 21:13:08
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Tomcat
2021-01-26 22:51:30
Exploit for Deserialization of Untrusted Data in Oracle Retail Order Broker
2021-01-15 17:59:50
Exploit for Deserialization of Untrusted Data in Apache Tomcat
2020-09-05 13:56:51
redhat
redhat
kaspersky
kaspersky
KLA11785 Security vulnerability in Apache Tomcat
2020-05-11 00:00:00
KLA11784 Security vulnerability in Apache Tomcat
2020-05-16 00:00:00
debian
debian
[SECURITY] [DLA 2217-1] tomcat7 security update
2020-05-23 17:27:59
[SECURITY] [DLA 2279-1] tomcat8 security update
2020-07-12 21:11:35
[SECURITY] [DSA 4627-1] tomcat9 security update
2020-07-17 18:07:40
mageia
mageia
Updated tomcat packages fix security vulnerability
2020-07-05 14:26:44
redhatcve
redhatcve
osv
osv
Potential remote code execution in Apache Tomcat
2020-05-21 18:52:29
BIT-tomcat-2020-9484
2024-03-06 11:10:32
tomcat7 - security update
2020-05-23 00:00:00
amazon
amazon
Important: tomcat7
2020-06-23 06:45:00
Important: tomcat8
2020-06-23 06:47:00
Important: tomcat
2020-06-26 22:56:00
suse
suse
Security update for tomcat (important)
2020-05-25 00:00:00
Security update for tomcat (important)
2021-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: tomcat-9.0.36-1.fc32
2020-06-23 01:22:02
[SECURITY] Fedora 31 Update: tomcat-9.0.36-1.fc31
2020-06-23 01:14:05
ubuntucve
ubuntucve
debiancve
debiancve
veracode
veracode
Remote Code Execution
2020-05-21 03:52:01
Remote Code Execution
2021-03-03 06:05:38
Remote Code Execution (RCE)
2021-03-02 07:51:38
nuclei
nuclei
Apache Tomcat Remote Command Execution
2020-07-03 05:39:02
oraclelinux
oraclelinux
tomcat6 security update
2020-06-12 00:00:00
tomcat security update
2020-06-11 00:00:00
tomcat security and bug fix update
2020-10-06 00:00:00
nvd
nvd
cvelist
cvelist
CVE-2020-9484
2020-05-20 18:26:41
CVE-2022-23181 Local privilege escalation with FileStore
2022-01-27 00:00:00
CVE-2021-25329 Incomplete fix for CVE-2020-9484
2021-03-01 12:00:20
broadcom
broadcom
BSA-2022-1839
2022-05-03 00:00:00
github
github
Potential remote code execution in Apache Tomcat
2020-05-21 18:52:29
Race condition in Apache Tomcat
2022-02-01 00:45:44
Potential remote code execution in Apache Tomcat
2021-03-19 20:11:13
prion
prion
Deserialization of untrusted data
2020-05-20 19:15:00
Code injection
2022-01-27 13:15:00
Design/Logic Flaw
2021-03-01 12:15:00
cve
cve
attackerkb
attackerkb
CVE-2020-9484 — PersistentManager Java deserialization vulnerability
2020-05-20 00:00:00
photon
photon
ubuntu
ubuntu
Tomcat vulnerabilities
2024-07-23 00:00:00
Tomcat vulnerabilities
2020-08-04 00:00:00
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.914
Percentile
99.0%
Related for 676CA486-9C1E-11EA-8B5E-B42E99A1B9C3