Good Control
1 CVEs
product
Monthly
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
RCE
Apache
Debian
Oracle
Tomcat
+25
NVD
Exploit-DB
VulDB
CVSS 3.1
9.8
EPSS
99.3%
Threat
7.9
CVE-2020-1938
Maven
EPSS 99%
7.9
CVSS 9.8
CRITICAL
POC
KEV
PATCH
THREAT
Act Now
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
RCE
Apache
Debian
+27
NVD
Exploit-DB
VulDB