Vulnerabilities CVE-2017-12615

CVE-2017-12615

Medium

Open

KEV

TLP:CLEAR

Apache Tomcat on Windows Remote Code Execution Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Details

EPSS Score ⓘ: 99.61%

99.9th percentile
Confidence: 100%
Published: Sep 19, 2017
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Mar 25, 2022
Patch Due: Apr 15, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.