Lucene search
RedHatRHSA-2020:2487HistoryJun 10, 2020 - 3:00 p.m.
(RHSA-2020:2487) Important: Red Hat JBoss Web Server 3.1 Service Pack 9 security update
2020-06-1015:00:02
access.redhat.com
41
0.922 High
EPSS
Percentile
99.0%
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 9 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
- tomcat: Apache Tomcat Remote Code Execution via session persistence (CVE-2020-9484)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
Apache Tomcat 7.0.0 < 7.0.104
2020-05-22 00:00:00
Debian DLA-2217-1 : tomcat7 security update
2020-05-26 00:00:00
GLSA-202006-21 : Apache Tomcat: Remote code execution
2020-06-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for tomcat (openSUSE-SU-2020:0711-1)
2020-05-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1365-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2020-1932)
2020-09-04 00:00:00
oraclelinux
oraclelinux
tomcat security update
2020-06-11 00:00:00
tomcat6 security update
2020-06-12 00:00:00
tomcat security and bug fix update
2020-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: tomcat-9.0.36-1.fc31
2020-06-23 01:14:05
[SECURITY] Fedora 32 Update: tomcat-9.0.36-1.fc32
2020-06-23 01:22:02
broadcom
broadcom
BSA-2022-1839
2022-05-03 00:00:00
osv
osv
tomcat7 - security update
2020-05-23 00:00:00
Potential remote code execution in Apache Tomcat
2020-05-21 18:52:29
BIT-tomcat-2020-9484
2024-03-06 11:10:32
cvelist
cvelist
CVE-2020-9484
2020-05-20 18:26:41
CVE-2022-23181 Local privilege escalation with FileStore
2022-01-27 00:00:00
CVE-2021-25329 Incomplete fix for CVE-2020-9484
2021-03-01 12:00:20
tomcat
tomcat
Fixed in Apache Tomcat 7.0.104
2020-05-16 00:00:00
Fixed in Apache Tomcat 10.0.0-M5
2020-05-11 00:00:00
Fixed in Apache Tomcat 9.0.35
2020-05-11 00:00:00
github
github
Potential remote code execution in Apache Tomcat
2020-05-21 18:52:29
Race condition in Apache Tomcat
2022-02-01 00:45:44
Potential remote code execution in Apache Tomcat
2021-03-19 20:11:13
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Tomcat
2020-06-04 14:19:12
Exploit for Deserialization of Untrusted Data in Apache Tomcat
2021-02-10 16:27:07
Exploit for Deserialization of Untrusted Data in Apache Tomcat
2021-03-01 11:16:04
archlinux
archlinux
[ASA-202006-6] tomcat7: arbitrary code execution
2020-06-06 00:00:00
[ASA-202006-7] tomcat9: arbitrary code execution
2020-06-06 00:00:00
[ASA-202006-5] tomcat8: arbitrary code execution
2020-06-06 00:00:00
redhatcve
redhatcve
debian
debian
[SECURITY] [DLA 2217-1] tomcat7 security update
2020-05-23 17:27:59
[SECURITY] [DLA 2279-1] tomcat8 security update
2020-07-12 21:11:35
redhat
redhat
(RHSA-2020:2506) Important: Red Hat JBoss Web Server 5.3.1 security update
2020-06-10 16:09:35
(RHSA-2020:2530) Important: tomcat security update
2020-06-11 08:51:20
(RHSA-2020:2509) Important: Red Hat JBoss Web Server 5.3.1 security update
2020-06-10 17:01:08
mageia
mageia
Updated tomcat packages fix security vulnerability
2020-07-05 14:26:44
nvd
nvd
suse
suse
Security update for tomcat (important)
2020-05-25 00:00:00
Security update for tomcat (important)
2021-04-02 00:00:00
amazon
amazon
Important: tomcat7
2020-06-23 06:45:00
Important: tomcat8
2020-06-23 06:47:00
Important: tomcat
2020-06-26 22:56:00
ubuntucve
ubuntucve
veracode
veracode
Remote Code Execution
2020-05-21 03:52:01
Remote Code Execution (RCE)
2021-03-02 07:51:38
Remote Code Execution
2021-03-03 06:05:38
nuclei
nuclei
Apache Tomcat Remote Command Execution
2020-07-03 05:39:02
debiancve
debiancve
centos
centos
tomcat security update
2020-06-11 21:13:08
gentoo
gentoo
Apache Tomcat: Remote code execution
2020-06-15 00:00:00
atlassian
atlassian
Upgrade Apache Tomcat 8.5.50 - version affected by CVE-2020-9484
2020-06-25 04:59:30
Upgrade Apache Tomcat 8.5.50 - version affected by CVE-2020-9484
2020-06-25 04:59:30
Update Tomcat to version 8.5.75 to address CVE-2020-9484/CVE-2022-23181
2022-02-08 16:45:17
kaspersky
kaspersky
KLA11785 Security vulnerability in Apache Tomcat
2020-05-11 00:00:00
KLA11784 Security vulnerability in Apache Tomcat
2020-05-16 00:00:00
f5
f5
K03121171 : Apache Tomcat vulnerability CVE-2020-9484
2020-05-27 00:00:00
K28409053 : Apache Tomcat vulnerability CVE-2022-23181
2022-02-18 00:00:00
K73648110 : Apache Tomcat vulnerability CVE-2021-25329
2021-03-16 00:00:00
ibm
ibm
freebsd
freebsd
Apache Tomcat Remote Code Execution via session persistence
2020-05-12 00:00:00
prion
prion
Deserialization of untrusted data
2020-05-20 19:15:00
Code injection
2022-01-27 13:15:00
Design/Logic Flaw
2021-03-01 12:15:00
cve
cve
attackerkb
attackerkb
CVE-2020-9484 — PersistentManager Java deserialization vulnerability
2020-05-20 00:00:00
photon
photon
ubuntu
ubuntu
Tomcat vulnerabilities
2020-08-04 00:00:00
Tomcat vulnerabilities
2020-10-21 00:00:00