{"schema_version":"1.7.5","id":"CVE-2020-13943","published":"2020-10-12T14:15:12.183Z","modified":"2026-07-08T05:53:36.707116318Z","aliases":["BIT-tomcat-2020-13943","GHSA-f268-65qc-98vg"],"related":["SUSE-SU-2020:2996-1","SUSE-SU-2020:3068-1","SUSE-SU-2020:3069-1","SUSE-SU-2021:0040-1","SUSE-SU-2026:1058-1","openSUSE-SU-2020:1799-1","openSUSE-SU-2020:1842-1","openSUSE-SU-2024:11468-1","openSUSE-SU-2024:13441-1"],"details":"If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/tomcat","events":[{"introduced":"e37b977db6f47e4380ad67114a49e8568951c953"},{"last_affected":"c549413165721180b15f62033c1be6c5970028fd"}],"database_specific":{"cpe":["cpe:2.3:a:apache:tomcat:8.5.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.8:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.9:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.10:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.11:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.12:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.13:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.14:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.15:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.16:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.17:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.18:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.19:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.20:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.21:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.22:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.23:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.24:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.25:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.26:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.27:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.28:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.29:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.30:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.31:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.32:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.33:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.34:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.35:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.36:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.37:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.38:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.39:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.40:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.41:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.42:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.43:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.44:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.45:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.46:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.47:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.48:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.49:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.50:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.51:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.52:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.53:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.54:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.55:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.56:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:8.5.57:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.3:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.7:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.8:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.9:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.10:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.11:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.12:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.13:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.14:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.15:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.16:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.17:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.18:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.19:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.20:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.21:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.22:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.23:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.24:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.25:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.26:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.27:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.28:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.29:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.30:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.31:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.32:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.33:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.34:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.35:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.36:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.37:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.5.0"},{"last_affected":"8.5.0"},{"introduced":"8.5.1"},{"last_affected":"8.5.1"},{"introduced":"8.5.2"},{"last_affected":"8.5.2"},{"introduced":"8.5.3"},{"last_affected":"8.5.3"},{"introduced":"8.5.4"},{"last_affected":"8.5.4"},{"introduced":"8.5.5"},{"last_affected":"8.5.5"},{"introduced":"8.5.6"},{"last_affected":"8.5.6"},{"introduced":"8.5.7"},{"last_affected":"8.5.7"},{"introduced":"8.5.8"},{"last_affected":"8.5.8"},{"introduced":"8.5.9"},{"last_affected":"8.5.9"},{"introduced":"8.5.10"},{"last_affected":"8.5.10"},{"introduced":"8.5.11"},{"last_affected":"8.5.11"},{"introduced":"8.5.12"},{"last_affected":"8.5.12"},{"introduced":"8.5.13"},{"last_affected":"8.5.13"},{"introduced":"8.5.14"},{"last_affected":"8.5.14"},{"introduced":"8.5.15"},{"last_affected":"8.5.15"},{"introduced":"8.5.16"},{"last_affected":"8.5.16"},{"introduced":"8.5.17"},{"last_affected":"8.5.17"},{"introduced":"8.5.18"},{"last_affected":"8.5.18"},{"introduced":"8.5.19"},{"last_affected":"8.5.19"},{"introduced":"8.5.20"},{"last_affected":"8.5.20"},{"introduced":"8.5.21"},{"last_affected":"8.5.21"},{"introduced":"8.5.22"},{"last_affected":"8.5.22"},{"introduced":"8.5.23"},{"last_affected":"8.5.23"},{"introduced":"8.5.24"},{"last_affected":"8.5.24"},{"introduced":"8.5.25"},{"last_affected":"8.5.25"},{"introduced":"8.5.26"},{"last_affected":"8.5.26"},{"introduced":"8.5.27"},{"last_affected":"8.5.27"},{"introduced":"8.5.28"},{"last_affected":"8.5.28"},{"introduced":"8.5.29"},{"last_affected":"8.5.29"},{"introduced":"8.5.30"},{"last_affected":"8.5.30"},{"introduced":"8.5.31"},{"last_affected":"8.5.31"},{"introduced":"8.5.32"},{"last_affected":"8.5.32"},{"introduced":"8.5.33"},{"last_affected":"8.5.33"},{"introduced":"8.5.34"},{"last_affected":"8.5.34"},{"introduced":"8.5.35"},{"last_affected":"8.5.35"},{"introduced":"8.5.36"},{"last_affected":"8.5.36"},{"introduced":"8.5.37"},{"last_affected":"8.5.37"},{"introduced":"8.5.38"},{"last_affected":"8.5.38"},{"introduced":"8.5.39"},{"last_affected":"8.5.39"},{"introduced":"8.5.40"},{"last_affected":"8.5.40"},{"introduced":"8.5.41"},{"last_affected":"8.5.41"},{"introduced":"8.5.42"},{"last_affected":"8.5.42"},{"introduced":"8.5.43"},{"last_affected":"8.5.43"},{"introduced":"8.5.44"},{"last_affected":"8.5.44"},{"introduced":"8.5.45"},{"last_affected":"8.5.45"},{"introduced":"8.5.46"},{"last_affected":"8.5.46"},{"introduced":"8.5.47"},{"last_affected":"8.5.47"},{"introduced":"8.5.48"},{"last_affected":"8.5.48"},{"introduced":"8.5.49"},{"last_affected":"8.5.49"},{"introduced":"8.5.50"},{"last_affected":"8.5.50"},{"introduced":"8.5.51"},{"last_affected":"8.5.51"},{"introduced":"8.5.52"},{"last_affected":"8.5.52"},{"introduced":"8.5.53"},{"last_affected":"8.5.53"},{"introduced":"8.5.54"},{"last_affected":"8.5.54"},{"introduced":"8.5.55"},{"last_affected":"8.5.55"},{"introduced":"8.5.56"},{"last_affected":"8.5.56"},{"introduced":"8.5.57"},{"last_affected":"8.5.57"},{"introduced":"9.0.0-milestone10"},{"last_affected":"9.0.0-milestone10"},{"introduced":"9.0.0-milestone11"},{"last_affected":"9.0.0-milestone11"},{"introduced":"9.0.0-milestone12"},{"last_affected":"9.0.0-milestone12"},{"introduced":"9.0.0-milestone13"},{"last_affected":"9.0.0-milestone13"},{"introduced":"9.0.0-milestone14"},{"last_affected":"9.0.0-milestone14"},{"introduced":"9.0.0-milestone15"},{"last_affected":"9.0.0-milestone15"},{"introduced":"9.0.0-milestone16"},{"last_affected":"9.0.0-milestone16"},{"introduced":"9.0.0-milestone17"},{"last_affected":"9.0.0-milestone17"},{"introduced":"9.0.0-milestone18"},{"last_affected":"9.0.0-milestone18"},{"introduced":"9.0.0-milestone19"},{"last_affected":"9.0.0-milestone19"},{"introduced":"9.0.0-milestone20"},{"last_affected":"9.0.0-milestone20"},{"introduced":"9.0.0-milestone21"},{"last_affected":"9.0.0-milestone21"},{"introduced":"9.0.0-milestone22"},{"last_affected":"9.0.0-milestone22"},{"introduced":"9.0.0-milestone23"},{"last_affected":"9.0.0-milestone23"},{"introduced":"9.0.0-milestone24"},{"last_affected":"9.0.0-milestone24"},{"introduced":"9.0.0-milestone25"},{"last_affected":"9.0.0-milestone25"},{"introduced":"9.0.0-milestone26"},{"last_affected":"9.0.0-milestone26"},{"introduced":"9.0.0-milestone27"},{"last_affected":"9.0.0-milestone27"},{"introduced":"9.0.0-milestone5"},{"last_affected":"9.0.0-milestone5"},{"introduced":"9.0.0-milestone6"},{"last_affected":"9.0.0-milestone6"},{"introduced":"9.0.0-milestone7"},{"last_affected":"9.0.0-milestone7"},{"introduced":"9.0.0-milestone8"},{"last_affected":"9.0.0-milestone8"},{"introduced":"9.0.0-milestone9"},{"last_affected":"9.0.0-milestone9"},{"introduced":"9.0.1"},{"last_affected":"9.0.1"},{"introduced":"9.0.2"},{"last_affected":"9.0.2"},{"introduced":"9.0.3"},{"last_affected":"9.0.3"},{"introduced":"9.0.4"},{"last_affected":"9.0.4"},{"introduced":"9.0.5"},{"last_affected":"9.0.5"},{"introduced":"9.0.6"},{"last_affected":"9.0.6"},{"introduced":"9.0.7"},{"last_affected":"9.0.7"},{"introduced":"9.0.8"},{"last_affected":"9.0.8"},{"introduced":"9.0.9"},{"last_affected":"9.0.9"},{"introduced":"9.0.10"},{"last_affected":"9.0.10"},{"introduced":"9.0.11"},{"last_affected":"9.0.11"},{"introduced":"9.0.12"},{"last_affected":"9.0.12"},{"introduced":"9.0.13"},{"last_affected":"9.0.13"},{"introduced":"9.0.14"},{"last_affected":"9.0.14"},{"introduced":"9.0.15"},{"last_affected":"9.0.15"},{"introduced":"9.0.16"},{"last_affected":"9.0.16"},{"introduced":"9.0.17"},{"last_affected":"9.0.17"},{"introduced":"9.0.18"},{"last_affected":"9.0.18"},{"introduced":"9.0.19"},{"last_affected":"9.0.19"},{"introduced":"9.0.20"},{"last_affected":"9.0.20"},{"introduced":"9.0.21"},{"last_affected":"9.0.21"},{"introduced":"9.0.22"},{"last_affected":"9.0.22"},{"introduced":"9.0.23"},{"last_affected":"9.0.23"},{"introduced":"9.0.24"},{"last_affected":"9.0.24"},{"introduced":"9.0.25"},{"last_affected":"9.0.25"},{"introduced":"9.0.26"},{"last_affected":"9.0.26"},{"introduced":"9.0.27"},{"last_affected":"9.0.27"},{"introduced":"9.0.28"},{"last_affected":"9.0.28"},{"introduced":"9.0.29"},{"last_affected":"9.0.29"},{"introduced":"9.0.30"},{"last_affected":"9.0.30"},{"introduced":"9.0.31"},{"last_affected":"9.0.31"},{"introduced":"9.0.32"},{"last_affected":"9.0.32"},{"introduced":"9.0.33"},{"last_affected":"9.0.33"},{"introduced":"9.0.34"},{"last_affected":"9.0.34"},{"introduced":"9.0.35"},{"last_affected":"9.0.35"},{"introduced":"9.0.36"},{"last_affected":"9.0.36"},{"introduced":"9.0.37"},{"last_affected":"9.0.37"},{"introduced":"10.0.0-milestone1"},{"last_affected":"10.0.0-milestone1"},{"introduced":"10.0.0-milestone2"},{"last_affected":"10.0.0-milestone2"},{"introduced":"10.0.0-milestone3"},{"last_affected":"10.0.0-milestone3"},{"introduced":"10.0.0-milestone4"},{"last_affected":"10.0.0-milestone4"},{"introduced":"10.0.0-milestone5"},{"last_affected":"10.0.0-milestone5"},{"introduced":"10.0.0-milestone6"},{"last_affected":"10.0.0-milestone6"},{"introduced":"10.0.0-milestone7"},{"last_affected":"10.0.0-milestone7"}],"source":"CPE_STRING"}}],"versions":["10.0.0-milestone1","10.0.0-milestone2","10.0.0-milestone3","10.0.0-milestone4","10.0.0-milestone5","10.0.0-milestone6","10.0.0-milestone7","8.5.0","8.5.1","8.5.10","8.5.11","8.5.12","8.5.13","8.5.14","8.5.15","8.5.16","8.5.17","8.5.18","8.5.19","8.5.2","8.5.20","8.5.21","8.5.22","8.5.23","8.5.24","8.5.25","8.5.26","8.5.27","8.5.28","8.5.29","8.5.3","8.5.30","8.5.31","8.5.32","8.5.33","8.5.34","8.5.35","8.5.36","8.5.37","8.5.38","8.5.39","8.5.4","8.5.40","8.5.41","8.5.42","8.5.43","8.5.44","8.5.45","8.5.46","8.5.47","8.5.48","8.5.49","8.5.5","8.5.50","8.5.51","8.5.52","8.5.53","8.5.54","8.5.55","8.5.56","8.5.57","8.5.6","8.5.7","8.5.8","8.5.9","9.0.0-milestone10","9.0.0-milestone11","9.0.0-milestone12","9.0.0-milestone13","9.0.0-milestone14","9.0.0-milestone15","9.0.0-milestone16","9.0.0-milestone17","9.0.0-milestone18","9.0.0-milestone19","9.0.0-milestone20","9.0.0-milestone21","9.0.0-milestone22","9.0.0-milestone23","9.0.0-milestone24","9.0.0-milestone25","9.0.0-milestone26","9.0.0-milestone27","9.0.0-milestone5","9.0.0-milestone6","9.0.0-milestone7","9.0.0-milestone8","9.0.0-milestone9","9.0.1","9.0.10","9.0.11","9.0.12","9.0.13","9.0.14","9.0.15","9.0.16","9.0.17","9.0.18","9.0.19","9.0.2","9.0.20","9.0.21","9.0.22","9.0.23","9.0.24","9.0.25","9.0.26","9.0.27","9.0.28","9.0.29","9.0.3","9.0.30","9.0.31","9.0.32","9.0.33","9.0.34","9.0.35","9.0.36","9.0.37","9.0.4","9.0.5","9.0.6","9.0.7","9.0.8","9.0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13943.json"}}],"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html"},{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20201016-0007/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4835"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"17.1"},{"last_affected":"17.1"},{"introduced":"17.2"},{"last_affected":"17.2"},{"introduced":"17.3"},{"last_affected":"17.3"}],"source":"CPE_STRING","vendor_product":"oracle:instantis_enterprisetrack"},{"cpes":["cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"oracle:sd-wan_edge"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}