CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12615

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.944

EPSS Ranking 100.0%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

Proposed Action

When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Ransomware Campaign

Known

References

Products affected by CVE-2017-12615

Apache » Tomcat » Version: 7.0.0

cpe:2.3:a:apache:tomcat:7.0.0
Apache » Tomcat » Version: 7.0.1

cpe:2.3:a:apache:tomcat:7.0.1
Apache » Tomcat » Version: 7.0.10

cpe:2.3:a:apache:tomcat:7.0.10
Apache » Tomcat » Version: 7.0.11

cpe:2.3:a:apache:tomcat:7.0.11
Apache » Tomcat » Version: 7.0.12

cpe:2.3:a:apache:tomcat:7.0.12
Apache » Tomcat » Version: 7.0.13

cpe:2.3:a:apache:tomcat:7.0.13
Apache » Tomcat » Version: 7.0.14

cpe:2.3:a:apache:tomcat:7.0.14
Apache » Tomcat » Version: 7.0.15

cpe:2.3:a:apache:tomcat:7.0.15
Apache » Tomcat » Version: 7.0.16

cpe:2.3:a:apache:tomcat:7.0.16
Apache » Tomcat » Version: 7.0.17

cpe:2.3:a:apache:tomcat:7.0.17
Apache » Tomcat » Version: 7.0.18

cpe:2.3:a:apache:tomcat:7.0.18
Apache » Tomcat » Version: 7.0.19

cpe:2.3:a:apache:tomcat:7.0.19
Apache » Tomcat » Version: 7.0.2

cpe:2.3:a:apache:tomcat:7.0.2
Apache » Tomcat » Version: 7.0.20

cpe:2.3:a:apache:tomcat:7.0.20
Apache » Tomcat » Version: 7.0.21

cpe:2.3:a:apache:tomcat:7.0.21
Apache » Tomcat » Version: 7.0.22

cpe:2.3:a:apache:tomcat:7.0.22
Apache » Tomcat » Version: 7.0.23

cpe:2.3:a:apache:tomcat:7.0.23
Apache » Tomcat » Version: 7.0.24

cpe:2.3:a:apache:tomcat:7.0.24
Apache » Tomcat » Version: 7.0.25

cpe:2.3:a:apache:tomcat:7.0.25
Apache » Tomcat » Version: 7.0.26

cpe:2.3:a:apache:tomcat:7.0.26
Apache » Tomcat » Version: 7.0.27

cpe:2.3:a:apache:tomcat:7.0.27
Apache » Tomcat » Version: 7.0.28

cpe:2.3:a:apache:tomcat:7.0.28
Apache » Tomcat » Version: 7.0.29

cpe:2.3:a:apache:tomcat:7.0.29
Apache » Tomcat » Version: 7.0.3

cpe:2.3:a:apache:tomcat:7.0.3
Apache » Tomcat » Version: 7.0.30

cpe:2.3:a:apache:tomcat:7.0.30
Apache » Tomcat » Version: 7.0.31

cpe:2.3:a:apache:tomcat:7.0.31
Apache » Tomcat » Version: 7.0.32

cpe:2.3:a:apache:tomcat:7.0.32
Apache » Tomcat » Version: 7.0.33

cpe:2.3:a:apache:tomcat:7.0.33
Apache » Tomcat » Version: 7.0.34

cpe:2.3:a:apache:tomcat:7.0.34
Apache » Tomcat » Version: 7.0.35

cpe:2.3:a:apache:tomcat:7.0.35
Apache » Tomcat » Version: 7.0.36

cpe:2.3:a:apache:tomcat:7.0.36
Apache » Tomcat » Version: 7.0.37

cpe:2.3:a:apache:tomcat:7.0.37
Apache » Tomcat » Version: 7.0.38

cpe:2.3:a:apache:tomcat:7.0.38
Apache » Tomcat » Version: 7.0.39

cpe:2.3:a:apache:tomcat:7.0.39
Apache » Tomcat » Version: 7.0.4

cpe:2.3:a:apache:tomcat:7.0.4
Apache » Tomcat » Version: 7.0.40

cpe:2.3:a:apache:tomcat:7.0.40
Apache » Tomcat » Version: 7.0.41

cpe:2.3:a:apache:tomcat:7.0.41
Apache » Tomcat » Version: 7.0.42

cpe:2.3:a:apache:tomcat:7.0.42
Apache » Tomcat » Version: 7.0.43

cpe:2.3:a:apache:tomcat:7.0.43
Apache » Tomcat » Version: 7.0.44

cpe:2.3:a:apache:tomcat:7.0.44
Apache » Tomcat » Version: 7.0.45

cpe:2.3:a:apache:tomcat:7.0.45
Apache » Tomcat » Version: 7.0.46

cpe:2.3:a:apache:tomcat:7.0.46
Apache » Tomcat » Version: 7.0.47

cpe:2.3:a:apache:tomcat:7.0.47
Apache » Tomcat » Version: 7.0.48

cpe:2.3:a:apache:tomcat:7.0.48
Apache » Tomcat » Version: 7.0.49

cpe:2.3:a:apache:tomcat:7.0.49
Apache » Tomcat » Version: 7.0.5

cpe:2.3:a:apache:tomcat:7.0.5
Apache » Tomcat » Version: 7.0.50

cpe:2.3:a:apache:tomcat:7.0.50
Apache » Tomcat » Version: 7.0.51

cpe:2.3:a:apache:tomcat:7.0.51
Apache » Tomcat » Version: 7.0.52

cpe:2.3:a:apache:tomcat:7.0.52
Apache » Tomcat » Version: 7.0.53

cpe:2.3:a:apache:tomcat:7.0.53
Apache » Tomcat » Version: 7.0.54

cpe:2.3:a:apache:tomcat:7.0.54
Apache » Tomcat » Version: 7.0.55

cpe:2.3:a:apache:tomcat:7.0.55
Apache » Tomcat » Version: 7.0.56

cpe:2.3:a:apache:tomcat:7.0.56
Apache » Tomcat » Version: 7.0.57

cpe:2.3:a:apache:tomcat:7.0.57
Apache » Tomcat » Version: 7.0.58

cpe:2.3:a:apache:tomcat:7.0.58
Apache » Tomcat » Version: 7.0.59

cpe:2.3:a:apache:tomcat:7.0.59
Apache » Tomcat » Version: 7.0.6

cpe:2.3:a:apache:tomcat:7.0.6
Apache » Tomcat » Version: 7.0.60

cpe:2.3:a:apache:tomcat:7.0.60
Apache » Tomcat » Version: 7.0.61

cpe:2.3:a:apache:tomcat:7.0.61
Apache » Tomcat » Version: 7.0.62

cpe:2.3:a:apache:tomcat:7.0.62
Apache » Tomcat » Version: 7.0.63

cpe:2.3:a:apache:tomcat:7.0.63
Apache » Tomcat » Version: 7.0.64

cpe:2.3:a:apache:tomcat:7.0.64
Apache » Tomcat » Version: 7.0.65

cpe:2.3:a:apache:tomcat:7.0.65
Apache » Tomcat » Version: 7.0.66

cpe:2.3:a:apache:tomcat:7.0.66
Apache » Tomcat » Version: 7.0.67

cpe:2.3:a:apache:tomcat:7.0.67
Apache » Tomcat » Version: 7.0.68

cpe:2.3:a:apache:tomcat:7.0.68
Apache » Tomcat » Version: 7.0.69

cpe:2.3:a:apache:tomcat:7.0.69
Apache » Tomcat » Version: 7.0.7

cpe:2.3:a:apache:tomcat:7.0.7
Apache » Tomcat » Version: 7.0.70

cpe:2.3:a:apache:tomcat:7.0.70
Apache » Tomcat » Version: 7.0.71

cpe:2.3:a:apache:tomcat:7.0.71
Apache » Tomcat » Version: 7.0.72

cpe:2.3:a:apache:tomcat:7.0.72
Apache » Tomcat » Version: 7.0.73

cpe:2.3:a:apache:tomcat:7.0.73
Apache » Tomcat » Version: 7.0.74

cpe:2.3:a:apache:tomcat:7.0.74
Apache » Tomcat » Version: 7.0.75

cpe:2.3:a:apache:tomcat:7.0.75
Apache » Tomcat » Version: 7.0.76

cpe:2.3:a:apache:tomcat:7.0.76
Apache » Tomcat » Version: 7.0.77

cpe:2.3:a:apache:tomcat:7.0.77
Apache » Tomcat » Version: 7.0.78

cpe:2.3:a:apache:tomcat:7.0.78
Apache » Tomcat » Version: 7.0.79

cpe:2.3:a:apache:tomcat:7.0.79
Apache » Tomcat » Version: 7.0.8

cpe:2.3:a:apache:tomcat:7.0.8
Apache » Tomcat » Version: 7.0.9

cpe:2.3:a:apache:tomcat:7.0.9
Netapp » 7-Mode Transition Tool » Version: N/A

cpe:2.3:a:netapp:7-mode_transition_tool:-
Netapp » Oncommand Balance » Version: N/A

cpe:2.3:a:netapp:oncommand_balance:-
Netapp » Oncommand Shift » Version: N/A

cpe:2.3:a:netapp:oncommand_shift:-
Redhat » Enterprise Linux Server Update Services For Sap Solutions » Version: 7.4

cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4
Redhat » Enterprise Linux Server Update Services For Sap Solutions » Version: 7.6

cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6
Redhat » Enterprise Linux Server Update Services For Sap Solutions » Version: 7.7

cpe:2.3:a:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7
Redhat » Jboss Enterprise Web Server » Version: 2.0.0

cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0
Redhat » Jboss Enterprise Web Server » Version: 3.0.0

cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0
Redhat » Jboss Enterprise Web Server Text-Only Advisories » Version: N/A

cpe:2.3:a:redhat:jboss_enterprise_web_server_text-only_advisories:-
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Eus Compute Node » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.4
Redhat » Enterprise Linux Eus Compute Node » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.5
Redhat » Enterprise Linux Eus Compute Node » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.6
Redhat » Enterprise Linux Eus Compute Node » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7
Redhat » Enterprise Linux For Ibm Z Systems » Version: 7.0_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.4_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.5_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.6_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x
Redhat » Enterprise Linux For Ibm Z Systems Eus » Version: 7.7_s390x

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x
Redhat » Enterprise Linux For Power Big Endian » Version: 7.0_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.4_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.5_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.6_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64
Redhat » Enterprise Linux For Power Big Endian Eus » Version: 7.7_ppc64

cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64
Redhat » Enterprise Linux For Power Little Endian » Version: 7.0_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.4_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.5_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.6_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le
Redhat » Enterprise Linux For Power Little Endian Eus » Version: 7.7_ppc64le

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le
Redhat » Enterprise Linux For Scientific Computing » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 7.4_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4_ppc64le
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 7.6_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.6_ppc64le
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 7.7_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.7_ppc64le
Redhat » Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions » Version: 9.2_ppc64le

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le
Redhat » Enterprise Linux Server Tus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12615

Products

Pricing

Contact Us