Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2017-12617

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CVSS 8.1 · HighBuzz score 49.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 49.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 6.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
6.5
2 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • CISA Releases Cybersecurity Guidance for Healthcare, Public Health OrganizationsSecurityWeek

    New CISA guidance details cyber threats and risks to healthcare and public health organizations and recommends mitigations.

    newswww.securityweek.comNov 20, 2023, 2:52 PM
  • State-Sponsored Hackers Use Sophisticated DNS Hijacking in Ongoing AttacksSecurityWeek

    With growing concern over DNS manipulation attacks, details on a new elite state-sponsored DNS hijacking campaign have been released. Called operation Sea Turtle, researchers believe that at least 40 different organizations across 13 countries have been compromised.

    newswww.securityweek.comApr 18, 2019, 4:17 PM
  • Security Affairs newsletter Round 131 – News of the weekSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! The best news of the week with Security Affairs. Once again thank you! · 60% of institutions in Saudi Arabia hit by malware-based attacks · Security Affairs newsletter Round 130 – News of the week · Vxers abused legitimate VMware binary to spread Banking Trojan Distribution […]

    newssecurityaffairs.comOct 8, 2017, 8:56 AM
  • CVE-2017-12617 Code Execution flaw patched in Apache TomcatSecurity Affairs

    Several security vulnerabilities have been patched in recent weeks in Apache Tomcat, including the CVE-2017-12617 Code Execution vulnerability. Several security vulnerabilities have been patched in recent weeks in Apache Tomcat. The list of fixed flaws recently addressed also included code execution vulnerabilities. Apache Tomcat is the most widely used web application server, with over one million downloads […]

    newssecurityaffairs.comOct 5, 2017, 7:30 AM
  • Code Execution Flaws Patched in Apache TomcatSecurityWeek

    Several vulnerabilities, including ones that allow remote attackers to execute arbitrary code, have been patched in recent weeks in Apache Tomcat.

    newswww.securityweek.comOct 4, 2017, 6:58 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence