Known vulnerabilities in tomcat8 (Debian package) 8.5.37-1~bpo9+1

Vendor: Debian
Software: tomcat8 (Debian package)
Version: 8.5.37-1~bpo9+1
Software CPE: cpe:2.3:o:debian:tomcat8_debian_package:*:*:*:*:*:debian_linux:*:*
Website: https://www.debian.org/
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting tomcat8 (Debian package) version 8.5.37-1~bpo9+1 tomcat8 (Debian package) 8.5.37-1~bpo9+1 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25807 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-1935		 CWE-444 Medium
No
No
 8.5.54-0+deb9u1 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 15 more
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 8.5.54-0+deb9u1 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Public exploit available
Exploited
 8.5.54-0+deb9u1 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more