Jboss Enterprise Web Server Text Only Advisories

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-12617 Maven HIGH POC KEV PATCH THREAT Act Now

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Apache Tomcat File Upload Ubuntu Linux Agile Plm +55

NVD Exploit-DB VulDB

CVSS 3.1

8.1

EPSS

94.4%

Threat

7.5

CVE-2017-12615 Maven HIGH POC KEV PATCH THREAT Act Now

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.

Apache Microsoft Tomcat File Upload 7 Mode Transition Tool +20

NVD GitHub Exploit-DB VulDB

CVSS 3.1

8.1

EPSS

94.2%

Threat

7.4

CVE-2017-12617 Maven

EPSS 94% 7.5 CVSS 8.1

HIGH POC KEV PATCH THREAT Act Now

Apache Tomcat File Upload +57

NVD Exploit-DB VulDB

CVE-2017-12615 Maven

EPSS 94% 7.4 CVSS 8.1

HIGH POC KEV PATCH THREAT Act Now

Apache Microsoft Tomcat +22

NVD GitHub Exploit-DB VulDB