CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.065

EPSS Ranking 90.6%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 5.8

References

Products affected by CVE-2019-17569

Apache » Tomcat » Version: 7.0.98

cpe:2.3:a:apache:tomcat:7.0.98
Apache » Tomcat » Version: 7.0.99

cpe:2.3:a:apache:tomcat:7.0.99
Apache » Tomcat » Version: 8.5.48

cpe:2.3:a:apache:tomcat:8.5.48
Apache » Tomcat » Version: 8.5.49

cpe:2.3:a:apache:tomcat:8.5.49
Apache » Tomcat » Version: 8.5.50

cpe:2.3:a:apache:tomcat:8.5.50
Apache » Tomcat » Version: 9.0.28

cpe:2.3:a:apache:tomcat:9.0.28
Apache » Tomcat » Version: 9.0.29

cpe:2.3:a:apache:tomcat:9.0.29
Apache » Tomcat » Version: 9.0.30

cpe:2.3:a:apache:tomcat:9.0.30
Apache » Tomee » Version: 7.0.7

cpe:2.3:a:apache:tomee:7.0.7
Netapp » Data Availability Services » Version: N/A

cpe:2.3:a:netapp:data_availability_services:-
Netapp » Oncommand System Manager » Version: 3.0.0

cpe:2.3:a:netapp:oncommand_system_manager:3.0.0
Netapp » Oncommand System Manager » Version: 3.1

cpe:2.3:a:netapp:oncommand_system_manager:3.1
Netapp » Oncommand System Manager » Version: 3.1.1

cpe:2.3:a:netapp:oncommand_system_manager:3.1.1
Netapp » Oncommand System Manager » Version: 3.1.2

cpe:2.3:a:netapp:oncommand_system_manager:3.1.2
Netapp » Oncommand System Manager » Version: 3.1.3

cpe:2.3:a:netapp:oncommand_system_manager:3.1.3
Oracle » Agile Engineering Data Management » Version: 6.2.1.0

cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0
Oracle » Agile Plm » Version: 9.3.3

cpe:2.3:a:oracle:agile_plm:9.3.3
Oracle » Agile Plm » Version: 9.3.5

cpe:2.3:a:oracle:agile_plm:9.3.5
Oracle » Agile Plm » Version: 9.3.6

cpe:2.3:a:oracle:agile_plm:9.3.6
Oracle » Communications Instant Messaging Server » Version: 10.0.1.4.0

cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.4.0
Oracle » Health Sciences Empirica Inspections » Version: 1.0.1.2

cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.2
Oracle » Health Sciences Empirica Signal » Version: 7.3.3

cpe:2.3:a:oracle:health_sciences_empirica_signal:7.3.3
Oracle » Hospitality Guest Access » Version: 4.2.0

cpe:2.3:a:oracle:hospitality_guest_access:4.2.0
Oracle » Hospitality Guest Access » Version: 4.2.1

cpe:2.3:a:oracle:hospitality_guest_access:4.2.1
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Oracle » Mysql Enterprise Monitor » Version: N/A

cpe:2.3:a:oracle:mysql_enterprise_monitor:-
Oracle » Mysql Enterprise Monitor » Version: 2.3.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14
Oracle » Mysql Enterprise Monitor » Version: 3.0.25

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25
Oracle » Mysql Enterprise Monitor » Version: 3.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0
Oracle » Mysql Enterprise Monitor » Version: 3.1.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1
Oracle » Mysql Enterprise Monitor » Version: 3.1.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2
Oracle » Mysql Enterprise Monitor » Version: 3.1.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3
Oracle » Mysql Enterprise Monitor » Version: 3.1.3.7856

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856
Oracle » Mysql Enterprise Monitor » Version: 3.1.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5
Oracle » Mysql Enterprise Monitor » Version: 3.1.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6
Oracle » Mysql Enterprise Monitor » Version: 3.1.6.8003

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003
Oracle » Mysql Enterprise Monitor » Version: 3.1.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0
Oracle » Mysql Enterprise Monitor » Version: 3.2.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1
Oracle » Mysql Enterprise Monitor » Version: 3.2.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10
Oracle » Mysql Enterprise Monitor » Version: 3.2.1182

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182
Oracle » Mysql Enterprise Monitor » Version: 3.2.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2
Oracle » Mysql Enterprise Monitor » Version: 3.2.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3
Oracle » Mysql Enterprise Monitor » Version: 3.2.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4
Oracle » Mysql Enterprise Monitor » Version: 3.2.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5
Oracle » Mysql Enterprise Monitor » Version: 3.2.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6
Oracle » Mysql Enterprise Monitor » Version: 3.2.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8
Oracle » Mysql Enterprise Monitor » Version: 3.2.8.2223

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223
Oracle » Mysql Enterprise Monitor » Version: 3.2.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9
Oracle » Mysql Enterprise Monitor » Version: 3.3.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0
Oracle » Mysql Enterprise Monitor » Version: 3.3.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1
Oracle » Mysql Enterprise Monitor » Version: 3.3.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2
Oracle » Mysql Enterprise Monitor » Version: 3.3.2.1162

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162
Oracle » Mysql Enterprise Monitor » Version: 3.3.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3
Oracle » Mysql Enterprise Monitor » Version: 3.3.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4
Oracle » Mysql Enterprise Monitor » Version: 3.3.4.3247

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247
Oracle » Mysql Enterprise Monitor » Version: 3.3.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5
Oracle » Mysql Enterprise Monitor » Version: 3.3.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6
Oracle » Mysql Enterprise Monitor » Version: 3.3.6.3293

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6.3293
Oracle » Mysql Enterprise Monitor » Version: 3.3.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7
Oracle » Mysql Enterprise Monitor » Version: 3.3.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8
Oracle » Mysql Enterprise Monitor » Version: 3.3.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0
Oracle » Mysql Enterprise Monitor » Version: 3.4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1
Oracle » Mysql Enterprise Monitor » Version: 3.4.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10
Oracle » Mysql Enterprise Monitor » Version: 3.4.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2
Oracle » Mysql Enterprise Monitor » Version: 3.4.2.4181

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181
Oracle » Mysql Enterprise Monitor » Version: 3.4.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3
Oracle » Mysql Enterprise Monitor » Version: 3.4.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4
Oracle » Mysql Enterprise Monitor » Version: 3.4.4.4226

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4.4226
Oracle » Mysql Enterprise Monitor » Version: 3.4.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5
Oracle » Mysql Enterprise Monitor » Version: 3.4.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6
Oracle » Mysql Enterprise Monitor » Version: 3.4.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7
Oracle » Mysql Enterprise Monitor » Version: 3.4.7.4297

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297
Oracle » Mysql Enterprise Monitor » Version: 3.4.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8
Oracle » Mysql Enterprise Monitor » Version: 3.4.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.9.4237

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237
Oracle » Mysql Enterprise Monitor » Version: 4.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0
Oracle » Mysql Enterprise Monitor » Version: 4.0.0.5135

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0.5135
Oracle » Mysql Enterprise Monitor » Version: 4.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1
Oracle » Mysql Enterprise Monitor » Version: 4.0.11.5331

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.11.5331
Oracle » Mysql Enterprise Monitor » Version: 4.0.12

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12
Oracle » Mysql Enterprise Monitor » Version: 4.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2
Oracle » Mysql Enterprise Monitor » Version: 4.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3
Oracle » Mysql Enterprise Monitor » Version: 4.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4
Oracle » Mysql Enterprise Monitor » Version: 4.0.4.5235

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235
Oracle » Mysql Enterprise Monitor » Version: 4.0.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5
Oracle » Mysql Enterprise Monitor » Version: 4.0.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6
Oracle » Mysql Enterprise Monitor » Version: 4.0.6.5281

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281
Oracle » Mysql Enterprise Monitor » Version: 4.0.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7
Oracle » Mysql Enterprise Monitor » Version: 4.0.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8
Oracle » Mysql Enterprise Monitor » Version: 8.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0
Oracle » Mysql Enterprise Monitor » Version: 8.0.0.8131

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131
Oracle » Mysql Enterprise Monitor » Version: 8.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14
Oracle » Mysql Enterprise Monitor » Version: 8.0.18.1217

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.18.1217
Oracle » Mysql Enterprise Monitor » Version: 8.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2
Oracle » Mysql Enterprise Monitor » Version: 8.0.2.8191

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191
Oracle » Mysql Enterprise Monitor » Version: 8.0.20

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20
Oracle » Mysql Enterprise Monitor » Version: 8.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3
Oracle » Transportation Management » Version: 6.3.7

cpe:2.3:a:oracle:transportation_management:6.3.7
Oracle » Workload Manager » Version: 12.2.0.1

cpe:2.3:a:oracle:workload_manager:12.2.0.1
Oracle » Workload Manager » Version: 18c

cpe:2.3:a:oracle:workload_manager:18c
Oracle » Workload Manager » Version: 19c

cpe:2.3:a:oracle:workload_manager:19c
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17569

Products

Pricing

Contact Us