This page was not yet optimized for use on mobile devices.

CVE-2020-17527

Vulnerability details

Vulnerability ID	CVE-2020-17527
Published on	03.12.2020 19:15
Severity	HIGH

Vulnerable configurations

230 CPEs

- cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.51:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.52:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.53:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.54:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.55:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.56:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.57:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.58:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:8.5.59:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.31:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.32:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.33:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.34:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.35:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.35-3.39.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.35-3.57.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.36:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.37:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.38:*:*:*:*:*:*:*
- cpe:2.3:a:apache:tomcat:9.0.39:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_system_manager:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_system_manager:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_system_manager:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_system_manager:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_system_manager:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:blockchain_platform:-:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:-:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6.3293:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4.4226:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0.5135:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.11.5331:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.18.1217:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.22:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:workload_manager:18c:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:workload_manager:19c:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Vulnerable certificates

This CVE has no assigned vulnerable Common Criteria or FIPS 140 certificates.