CVE-2017-12616

CVSS 3.0: 7.5 high
EPSS: 70%p99
Published: Sep 19, 2017 · Sep 19, 2017
Modified: Oct 15, 2026

Analyze CVE-2017-12616 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

Vendors: apache

Products: tomcat

Weakness: CWE-200

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (70.1%)

In the news

1 story

CVE-2017-12617 Code Execution flaw patched in Apache Tomcat

Security AffairsOct 5, 05:28 UTC · Oct 5, 2017VulnerabilityCVE-2017-12617 CVE-2017-12615 CVE-2017-126163 · 1 read