● CVE — High
CVE-2020-13935
Vendordebian, canonical, opensuse, oracle, apacheProductdebian linux, ubuntu linux, leap, agile product lifecycle management, tomcat, communications instant messaging server, managed file transfer, epolicy orchestrator, agile plm, mysql enterprise monitor, oncommand system manager, agile engineering data management, instantis enterprisetrack, siebel ui framework, fmw platform, blockchain platform, communications cloud native core policy, commerce guided search, workload managerDiscoveredJul 14, 2020UpdatedAug 25, 2026
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.