Retail Insights
1 CVEs
product
Monthly
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.
Apache
Debian
Oracle
Red Hat
Tomcat
+60
NVD
Exploit-DB
VulDB
CVSS 3.1
8.1
EPSS
94.4%
Threat
7.5
CVE-2017-12617
Maven
EPSS 94%
7.5
CVSS 8.1
HIGH
POC
KEV
PATCH
THREAT
Act Now
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Actively exploited in the wild (cisa kev) and public exploit code available.
Apache
Debian
Oracle
+62
NVD
Exploit-DB
VulDB