Dashboard / CVE-2017-12617

CVE-2017-12617

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CISA Known Exploited Vulnerability

Vendor / Product Apache — Tomcat
Date Added 2022-03-25
Remediation Due 2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2017-12617

Weakness Classification (1)

Affected Software (157)

VendorProductVersion
apache tomcat 7.0.0 – 7.0.82
apache tomcat 8.0 – 8.0.47
apache tomcat 8.5.0 – 8.5.23
apache tomcat 9.0.0 – 9.0.1
canonical ubuntu_linux 12.04
canonical ubuntu_linux 16.04
canonical ubuntu_linux 17.10
canonical ubuntu_linux 18.04
debian debian_linux 7.0
netapp active_iq_unified_manager ≥ 7.3
netapp active_iq_unified_manager ≥ 9.5
netapp element -
netapp oncommand_balance -
netapp oncommand_insight -
netapp oncommand_shift -
netapp oncommand_workflow_automation -
netapp snapcenter -
oracle agile_product_lifecycle_management 9.3.3
oracle agile_product_lifecycle_management 9.3.4
oracle agile_product_lifecycle_management 9.3.5
oracle agile_product_lifecycle_management 9.3.6
oracle communications_instant_messaging_server 10.0.1
oracle endeca_information_discovery_integrator 3.1.0
oracle endeca_information_discovery_integrator 3.2.0
oracle enterprise_manager_for_mysql_database 12.1.0.4.0
oracle financial_services_analytical_applications_infrastructure 7.3.3.0.0 – 7.3.5.3.0
oracle financial_services_analytical_applications_infrastructure 8.0.0.0.0 – 8.0.9.0.0
oracle fmw_platform 12.2.1.2.0
oracle fmw_platform 12.2.1.3.0
oracle health_sciences_empirica_inspections 1.0.1.1
Showing 30 of 157 entries

References & Advisories (45)

https://usn.ubuntu.com/3665-1/
Third Party Advisory
Showing 25 of 45 references

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links