When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Connections 59
has cited scope1 retained · stored CVE-2017-12617 → Apache Software Foundation · Apache Tomcat06b9508e-2ab9-48d6-91f7-d5c6e4ce670f
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · communications_instant_messaging_server2cab56e8-1212-4997-b02e-a494ca978a3e
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · retail_advanced_inventory_planning0db1f696-c06d-4306-a0e4-31d1e2c6aad90eb2a965-68d1-4bb0-b638-90d3b09fdbba167ac520-d451-4481-9f45-e23d013905203cfe3192-1799-460c-9891-fcafd0c9349a
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · health_sciences_empirica_inspections530fd19d-1a04-48ad-8f74-ce432f10b7ef
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · jboss_enterprise_application_platform7842955a-f5c9-4193-8c88-77170bfc388de50d93db-306e-4b13-ab20-21567c4a5321
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · jboss_enterprise_web_server8ff4b820-5a15-4e6b-aaad-6a66f13a23bae1a65a19-e0a3-4fe9-a0fb-4ed020d50f39
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · retail_insights2a532c5c-a462-422b-b390-cc7a4bfd61a65d337fe5-64c0-47fe-ab9f-5c2e48e2688b6653273f-7efb-4bbc-95a4-415754e34dbdfcc97088-dac4-45dd-9937-a4a0382f4105
has vulnerable target scope8 retained · stored CVE-2017-12617 → oracle · retail_price_management1efde407-c819-45cc-95ef-ccb4da0aa1ee23e503b6-e492-4459-8a67-76f3e01e23f838cc61f3-cad0-4b2a-bb08-92b1267de99754a04788-dd8c-491d-a689-114d343273dc86dc3492-ca70-403d-9205-dba5bc88747491c66769-b2f3-4fa1-82c4-f02b237dc82f
has vulnerable target scope1 retained · stored CVE-2017-12617 → redhat · fusec4247176-9d57-4617-a217-09f969c25659
has vulnerable target scope1 retained · stored CVE-2017-12617 → redhat · jboss_enterprise_web_server_text-only_advisoriesf51030f8-77ff-4fc9-a39b-5ca2fb6c5161
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · fmw_platform69d82248-61db-43f8-be1f-fe576251f9f5859df2ee-e780-4354-86ff-85a67a4b4772
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · oncommand_balancebb90e245-e4fb-4c7c-ae11-f67f1eb17a5b
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · tuxedo_system_and_applications_monitor61724390-5d28-48d8-a173-39d58c546b70
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · micros_lucas64ff2f64-0b37-4215-88de-30e2a8be32be
has vulnerable target scope4 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_power_little_endian_eus189afd6e-25b3-4906-ab9b-89db43fa558d9e1d78df-3fda-4375-aa3e-bdb349020a47a4472b79-dc53-4423-ab65-1c53240d57ccac4c6849-466d-4ee6-9b73-3e793cfea13f
has vulnerable target scope4 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_ibm_z_systems_eus0a652a9d-2f46-478d-bcea-7292efa947844389ff82-0ca4-4723-9b1b-30f9d55bf0705e70cd17-f3e0-488c-bc1f-174f21caaec160edf125-2df5-4080-ad9f-4070ca01548b
has vulnerable target scope1 retained · stored CVE-2017-12617 → debian · debian_linux51b581bf-efb2-4ea6-bba2-c239c038a9c1
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · workload_manager8b4fbd87-578b-474f-a787-a00a148ef7d4
has vulnerable target scope8 retained · stored CVE-2017-12617 → oracle · retail_invoice_matching3808bd81-6ab6-4cd5-bd43-69423f5faadb4731c2b6-8b9a-4202-867c-b75d85b9d92e52810774-6f27-4d68-9883-04bf6085f69854eb7e73-74fe-41db-91b4-0296eae5be848e1d712b-2049-40a8-acea-21282eb50a61a2cae4a7-650b-493b-a2ff-c9bfd3be1ccf
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · retail_returns_management36f91e78-0038-4978-a416-f85b072b593841154ab2-eb2a-4712-ac27-148fd4469324489236bb-3475-4ac2-9bf8-7f91592f7ad4678ead29-276b-44b6-8d07-6c455e02518c
has vulnerable target scope3 retained · stored CVE-2017-12617 → oracle · mysql_enterprise_monitor207cf2c6-4910-4b4b-aea9-cae168700efa21ef6b9b-e903-46d6-a34a-d8b3dde18eddf3ce5672-c404-4026-8d63-5a40aa9f33bc
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · retail_order_management_system03e1ef15-d448-44b9-9da6-e0d7c27a4e80d30a502d-a145-401e-b636-db9bbcef06caddb6b9d0-7ece-44cd-aecb-372f628c4a30fca2fd96-8adb-43b7-889b-e592b22c3584
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · instantis_enterprisetrack906ea52a-598a-4a37-ad7d-3a83d2424f84966a08d3-c06a-4ea5-b933-545c639e1322
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · agile_plm255554b5-5c5e-4e78-9613-5f510d8bf56071685949-b97f-4b13-a843-d607bdfff0b5d604a23e-87fa-4a09-8c79-47001bf5b794eba49fba-b280-4d27-80ea-4a10fbc511ef
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · oncommand_insight679440ad-c0b8-4880-bd5b-27a132b0c8b2
has vulnerable target scope3 retained · stored CVE-2017-12617 → redhat · enterprise_linux_server_aus12a12400-1b61-4cf0-a5a4-b17cb1fa94dfbed3703c-021a-42c5-9859-b0a2b736f301fb72e2f7-3bcb-4ae6-8308-071be181416f
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · snapcenter767f4044-53b3-4489-a323-2a4716593b60
has vulnerable target scope2 retained · stored CVE-2017-12617 → netapp · active_iq_unified_manager8988827a-d053-4c75-b0aa-9c30f65f61a98c75c94e-904e-493a-b7e0-2e4934dc39a7
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · hospitality_guest_access397223c0-fb4c-40c1-9228-3a12be8349064e8528d5-b319-4da8-aed6-12967af9df8d
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · enterprise_manager_for_mysql_databasec8c7c2fa-71df-4bf5-8051-4d20ab8074ee
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · management_pack759589c0-71eb-400b-a626-9509e17f8ee5
has vulnerable target scope4 retained · stored CVE-2017-12617 → redhat · enterprise_linux_eus01192320-f99d-48ff-b59f-4ef3cb424180694c8afd-b063-4c43-b34b-b109cea274198c3beaf6-9588-4e88-a03f-ffc991827021c0ee5255-d2d9-4be1-ad28-f5706262d169
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · enterprise_linux_server34d77f83-04ee-4662-adaa-f280d6a82753b4d577f8-3fb1-428b-bb49-0b0c8a973b40
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · oncommand_shiftc2f60267-163c-4475-b8dd-66c222064c0c
has vulnerable target scope6 retained · stored CVE-2017-12617 → oracle · micros_retail_xbri_loss_prevention1bbd8ae0-9f40-47e0-9a81-5f34cd81af511cb7280d-488f-44fc-bdf8-a0a202197928346e3576-89a7-4dbc-98b9-d7b39761306d3598c98d-4e6d-421a-86c1-fbb0e4c33c3a7e256115-b86d-4a30-a926-24feaca87b7df33904e8-d71d-489d-b5b0-9e1b2d8b2302
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · endeca_information_discovery_integrator0da524e7-a1b2-4061-bd5c-55dcca5a3be4ea92b867-e63f-49e1-923d-0eda54e2a693
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · retail_central_officebdbe609e-27e6-40bd-83f8-356a1a74056add2ed457-aa34-4b42-9cf1-463d867f5aaa
has vulnerable target scope7 retained · stored CVE-2017-12617 → oracle · transportation_management1f6e6e29-0268-40b2-afa9-14c6f0e07477af8d7bca-e935-4596-9b1f-12be8ef22f36d0c36bda-d760-4535-97d2-163e18f36866d4f4ad92-bda4-4011-8e63-b80083548276dfb4eca6-43fd-4fd1-8f18-292b346cc21de7e26c41-245b-4fa6-b205-8257ed7571d7
has vulnerable target scope4 retained · stored CVE-2017-12617 → redhat · enterprise_linux_eus_compute_node25e977a3-d94c-45b4-a78a-f30a2d69795049f482ea-467a-4ca0-b14c-c4672a408d86a102f585-e56f-495f-b1ea-8d73b1764b86e08f190e-7872-4e7d-9a26-8a2fdfac81e4
has vulnerable target scope4 retained · stored CVE-2017-12617 → canonical · ubuntu_linux36c4ef56-c59a-4a70-9f37-86068bc22f556d2cfb99-eb25-48d7-85fa-79257ccb32ef7ccf252f-4ec4-4800-bae1-93ebab8a68bbab624a2a-a141-4b49-82ca-cff305c55ac5
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · elementac5505c2-d341-4fee-b9e7-296df7f280bb
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · retail_point-of-service9fd6761e-a3a6-4ad2-9273-2c12d603482bfaf4b40d-b438-41fd-b27e-fb34b3f86101
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · webcenter_sites148db8cb-041f-4610-8848-4fd22af864ae
has vulnerable target scope1 retained · stored CVE-2017-12617 → netapp · oncommand_workflow_automationc2ea42be-0f20-4d07-846c-8fc5f7331f24
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · enterprise_linux_workstation39b23873-9109-4578-ad86-3e31e152510ead9f66c7-45f9-4cca-a332-d3d3c6584046
has vulnerable target scope8 retained · stored CVE-2017-12617 → oracle · retail_store_inventory_management0469c903-c500-4996-984e-1eb6e777de0a0b7b709b-2eaf-4527-96db-2377fa366de10f5d0a43-0b27-4f0c-8e1a-09e32967ff104e6ce5a1-22d6-4bbd-aa6e-34f467ec7a099f8e71a8-a387-4b75-b6aa-3f73c784ced5b41e534a-95b1-4220-a4dd-42bca336e168
has vulnerable target scope4 retained · stored CVE-2017-12617 → apache · tomcat55944c76-d9e2-42c6-852c-f53a535cdce459ad3261-0fed-444a-b84b-0bf825673118704e326b-a908-4ec0-bd9f-c7ec7b1c12c57634a148-56d5-40a4-8b07-fccc60a75626
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · financial_services_analytical_applications_infrastructure034f59ad-ceb8-44f1-8737-385ed3f08526f7ccbb3d-7ffd-4959-925a-5a2b0df59846
has vulnerable target scope3 retained · stored CVE-2017-12617 → redhat · enterprise_linux_server_tus3ce18f55-3c7c-4d18-980d-986bd0ce939c990ddd99-34bf-436f-803b-80a99d96c861e193d428-6c00-4e84-b1c6-8b0978709e57
has vulnerable target scope4 retained · stored CVE-2017-12617 → oracle · retail_xstore_point_of_service4b1e6969-7a14-49a4-8a34-b183e20e21696e8f1857-6956-4c45-9427-43c3abd5ba27be21e2c9-990b-4393-a3c5-336e4b7cb9e2e348fdd2-dc1a-4c05-a197-0f680af09a16
has vulnerable target scope4 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_power_big_endian_eus7fcf5fb8-e90f-43b4-b403-6aaefa7eb3e68783d14f-c7bf-429c-9cd4-52fffcaa7119adf899f3-62cf-4c36-bb34-49024b5e239bfcbbbf52-6ab4-4ea6-8544-72856d35d6bf
has vulnerable target scope5 retained · stored CVE-2017-12617 → oracle · retail_order_broker02a56b37-4f55-4baa-93cb-bf0da6f91c31712e0c0d-40cb-404d-8d5a-94f0758729a88102eaed-24cd-43bd-9d39-8ef86762ac27811e8ad1-6ad1-4f90-824e-3978b86dfb1bc19cf7a0-810e-4de0-aac5-01f60bffef7e
has vulnerable target scope3 retained · stored CVE-2017-12617 → oracle · retail_eftlink430431ef-a637-4ae9-b212-cb9ecc430bcc4c82ee7d-4a9d-4ad8-9c68-0863f89ec1f6e9c87efa-a4c5-4fb2-bbe8-d3d8532dc005
has vulnerable target scope1 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_power_little_endian4706e60d-82e6-49b8-b831-3600527c95fc
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · enterprise_linux_desktop8f3aaf01-63c6-4651-aeee-cb60e0b1bdefbf3c89a0-a41e-496c-82e6-45e88b382389
has vulnerable target scope2 retained · stored CVE-2017-12617 → oracle · retail_back_officeae97150e-4d39-41b2-a171-e1a908f211a5f80fdf4a-1613-4c1e-a558-73c52320ba6a
has vulnerable target scope1 retained · stored CVE-2017-12617 → oracle · retail_convenience_and_fuel_pos_software81966fc2-5d24-4196-bbf0-39c01214392a
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_ibm_z_systems2817304f-3577-405a-9f2f-46db0db31e3cb82dc4ad-5073-413e-a9b9-11a5e54f6f65
has vulnerable target scope2 retained · stored CVE-2017-12617 → redhat · enterprise_linux_for_power_big_endian2aaf730a-2ca7-4d58-a5da-f6700d32948975733a8b-c946-4f25-bab2-58d1c1e9ac07