CVE-2020-1938CISA KEVEPSS p99.9%
CVE-2020-1938Apache Tomcat Improper Privilege Management Vulnerability
Apache / Tomcat
Description
Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.
Scoring
| CVSS | 9.8 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 99.27% probability of exploitation · percentile 99.9% · 2026-10-01T12:00:22Z |
| Last modified | 2026-08-25 |
CISA KEV entry
Added to KEV: 2022-03-03
(incoming)1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| KEVEntry | Apache Tomcat Improper Privilege Management Vulnerabilitykev-cve-2020-1938 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.