CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7675

The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.038

EPSS Ranking 87.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-7675

Apache » Tomcat » Version: 8.5.0

cpe:2.3:a:apache:tomcat:8.5.0
Apache » Tomcat » Version: 8.5.1

cpe:2.3:a:apache:tomcat:8.5.1
Apache » Tomcat » Version: 8.5.10

cpe:2.3:a:apache:tomcat:8.5.10
Apache » Tomcat » Version: 8.5.11

cpe:2.3:a:apache:tomcat:8.5.11
Apache » Tomcat » Version: 8.5.12

cpe:2.3:a:apache:tomcat:8.5.12
Apache » Tomcat » Version: 8.5.13

cpe:2.3:a:apache:tomcat:8.5.13
Apache » Tomcat » Version: 8.5.14

cpe:2.3:a:apache:tomcat:8.5.14
Apache » Tomcat » Version: 8.5.15

cpe:2.3:a:apache:tomcat:8.5.15
Apache » Tomcat » Version: 8.5.2

cpe:2.3:a:apache:tomcat:8.5.2
Apache » Tomcat » Version: 8.5.3

cpe:2.3:a:apache:tomcat:8.5.3
Apache » Tomcat » Version: 8.5.4

cpe:2.3:a:apache:tomcat:8.5.4
Apache » Tomcat » Version: 8.5.5

cpe:2.3:a:apache:tomcat:8.5.5
Apache » Tomcat » Version: 8.5.6

cpe:2.3:a:apache:tomcat:8.5.6
Apache » Tomcat » Version: 8.5.7

cpe:2.3:a:apache:tomcat:8.5.7
Apache » Tomcat » Version: 8.5.8

cpe:2.3:a:apache:tomcat:8.5.8
Apache » Tomcat » Version: 8.5.9

cpe:2.3:a:apache:tomcat:8.5.9
Apache » Tomcat » Version: 9.0.0

cpe:2.3:a:apache:tomcat:9.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-7675

Products

Pricing

Contact Us