CVE detail
CVE-2017-12615
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 9.4
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
28 source links · newest first
- 10th June – Threat Intelligence BulletinCheck Point Research
For the latest discoveries in cyber research for the week of 10th June 2019, please download our Threat Intelligence Bulletin TOP ATTACKS AND BREACHES American Medical Collection Agency (AMCA) has suffered a major data breach exposing personal and payment information of some ten million patients. The information included names, date of birth, address, […]
vendorresearch.checkpoint.comJun 16, 2019, 8:09 AM A new piece of malware appeared in the threat landscape, dubbed BlackSquid it targets web servers with several exploits to deliver cryptocurrency miners. Security experts at Trend Micro have discovered a new Monero cryptomining miner, dubbed BlackSquid, that is targeting web servers, network drives, and removable drives. The new piece of malware leverages many exploits […]
newssecurityaffairs.comJun 5, 2019, 7:19 AM- The Satan Ransomware adds new exploits to its arsenalSecurity Affairs
A variant of the Satan ransomware recently observed includes exploits to its arsenal and targets machines leveraging additional flaws. Experts at FortiGuard Labs have discovered a new variant of the Satan ransomware that includes new exploits to its portfolio and leverages additional vulnerabilities to infect as many machines as possible. The Satan ransomware first appeared […]
newssecurityaffairs.comMay 22, 2019, 6:36 AM - Satan Ransomware Expands Portfolio of ExploitsSecurityWeek
A recently observed Satan ransomware variant has added exploits to its portfolio and is looking to compromise more machines by targeting additional vulnerabilities.
newswww.securityweek.comMay 21, 2019, 4:03 PM A new cyptojacking campaign targeting enterprises in Asia is leveraging the National Security Agency-linked DoublePulsar backdoor and the EternalBlue exploit for network spreading, Symantec reveals.
newswww.securityweek.comApr 26, 2019, 2:14 PMSecurity experts uncovered a new cryptojacking campaign tracked as Beapy that leverages the NSA’s DoublePulsar backdoor and the EternalBlue exploit. Security experts at Symantec have uncovered a new cryptojacking campaign tracked as Beapy that leverages the NSA’s DoublePulsar backdoor and the EternalBlue exploit to spread a cryptocurrency malware on enterprise networks in Asia. “Beapy is […]
newssecurityaffairs.comApr 26, 2019, 2:05 PM- CVE-2017-12617 Code Execution flaw patched in Apache TomcatSecurity Affairs
Several security vulnerabilities have been patched in recent weeks in Apache Tomcat, including the CVE-2017-12617 Code Execution vulnerability. Several security vulnerabilities have been patched in recent weeks in Apache Tomcat. The list of fixed flaws recently addressed also included code execution vulnerabilities. Apache Tomcat is the most widely used web application server, with over one million downloads […]
newssecurityaffairs.comOct 5, 2017, 7:30 AM - Code Execution Flaws Patched in Apache TomcatSecurityWeek
Several vulnerabilities, including ones that allow remote attackers to execute arbitrary code, have been patched in recent weeks in Apache Tomcat.
newswww.securityweek.comOct 4, 2017, 6:58 PM No excerpt available.
Exploitwww.cisa.govSep 19, 2017, 1:29 PMNo excerpt available.
Vendor Advisorywww.synology.comSep 19, 2017, 1:29 PM- https://www.exploit-db.com/exploits/42953/www.exploit-db.com
No excerpt available.
Exploitwww.exploit-db.comSep 19, 2017, 1:29 PM - https://security.netapp.com/advisory/ntap-20171018-0001/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/8fcb1e2d5895413abcf266f011b9918ae03e0b7daceb118ffbf23f8c%40%3Cannounce.tomcat.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3Elists.apache.org
No excerpt available.
Exploitlists.apache.orgSep 19, 2017, 1:29 PM No excerpt available.
Exploitgithub.comSep 19, 2017, 1:29 PM- https://access.redhat.com/errata/RHSA-2018:0466access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - https://access.redhat.com/errata/RHSA-2018:0465access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - https://access.redhat.com/errata/RHSA-2017:3114access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - https://access.redhat.com/errata/RHSA-2017:3113access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - https://access.redhat.com/errata/RHSA-2017:3081access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - https://access.redhat.com/errata/RHSA-2017:3080access.redhat.com
No excerpt available.
Exploitaccess.redhat.comSep 19, 2017, 1:29 PM - http://www.securitytracker.com/id/1039392www.securitytracker.com
No excerpt available.
Third Party Advisorywww.securitytracker.comSep 19, 2017, 1:29 PM - http://www.securityfocus.com/bid/100901www.securityfocus.com
No excerpt available.
Exploitwww.securityfocus.comSep 19, 2017, 1:29 PM - http://breaktoprotect.blogspot.com/2017/09/the-case-of-cve-2017-12615-tomcat-7-put.htmlbreaktoprotect.blogspot.com
No excerpt available.
Exploitbreaktoprotect.blogspot.comSep 19, 2017, 1:29 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
2 repository references · best confidence 0.99 · max 0 stars
- breaktoprotect/CVE-2017-12615High confidencegithubNVD Exploit reference0 starsDiscovered Aug 1, 2026, 6:10 AM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
- K3ysTr0K3R/CVE-2017-12615High confidencegithubDiscovery source unavailable0 starsDiscovered Jul 9, 2026, 1:19 AM
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-5455CVSS 6.5 · Medium
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a…
- CVE-2023-3899CVSS 7.8 · High
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significan…
- CVE-2019-8720CVSS 8.8 · High
A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addr…
- CVE-2022-0330CVSS 7.8 · High
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user…
- CVE-2021-3656CVSS 8.8 · High
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest…
- CVE-2019-11043CVSS 8.7 · High
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buf…