H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-03-25
Last seen2022-03-25

Confidence

—

When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Labels

exploitedkev

CISA KEV context

Vendor / productApache Tomcat
Added2022-03-25
Due date2022-04-15
2 recorded

Relationships

2 external

References

nvd
CVE-2017-12617
open
cwe
CWE-434
open