{"id":"CVE-2017-12617","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-12617","generatedAt":"2026-10-28T22:12:24.414Z","title":"Apache Tomcat Remote Code Execution Vulnerability","description":"When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","published":"2017-10-04T01:29:02.000Z","lastModified":"2026-08-25T16:28:27.000Z","status":"Analyzed","sourceIdentifier":"security@apache.org","cvss":{"version":"3.1","score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-434"],"affected":["apache/tomcat","canonical/ubuntu linux","oracle/agile product lifecycle management","oracle/communications instant messaging server","oracle/endeca information discovery integrator","oracle/enterprise manager for mysql database","oracle/financial services analytical applications infrastructure","oracle/fmw platform","oracle/health sciences empirica inspections","oracle/hospitality guest access","oracle/instantis enterprisetrack","oracle/management pack","oracle/micros lucas","oracle/micros retail xbri loss prevention","oracle/mysql enterprise monitor","oracle/retail advanced inventory planning","oracle/retail back office","oracle/retail central office","oracle/retail convenience and fuel pos software","oracle/retail eftlink","oracle/retail insights","oracle/retail invoice matching","oracle/retail order broker","oracle/retail order management system","oracle/retail point-of-service","oracle/retail price management","oracle/retail returns management","oracle/retail store inventory management","oracle/retail xstore point of service","oracle/transportation management","oracle/tuxedo system and applications monitor","oracle/webcenter sites","oracle/workload manager","debian/debian linux","netapp/active iq unified manager","netapp/oncommand balance","netapp/oncommand insight","netapp/oncommand shift","netapp/oncommand workflow automation","netapp/snapcenter","netapp/element","redhat/fuse","redhat/jboss enterprise application platform","redhat/jboss enterprise web server","redhat/jboss enterprise web server text-only advisories","redhat/enterprise linux desktop","redhat/enterprise linux eus","redhat/enterprise linux eus compute node","redhat/enterprise linux for ibm z systems","redhat/enterprise linux for ibm z systems eus","redhat/enterprise linux for power big endian","redhat/enterprise linux for power big endian eus","redhat/enterprise linux for power little endian","redhat/enterprise linux for power little endian eus","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server tus","redhat/enterprise linux workstation"],"epss":{"score":0.99968,"percentile":0.99977,"date":"2026-10-27","history":[]},"kev":{"listed":true,"dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-12617"},"exploits":{"count":2,"verified":true,"firstPublished":"2017-10-09","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43008,"kind":"exploit","title":"Tomcat - Remote Code Execution via JSP Upload Bypass (Metasploit)","url":"https://www.exploit-db.com/exploits/43008","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/remote/43008.rb","file":"exploits/java/remote/43008.rb","published":"2017-10-17","added":"2017-10-17","updated":"2017-10-17","author":"Metasploit","type":"remote","platform":"java","port":null,"verified":true,"codes":["CVE-2017-12617"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/cfaa34d2a4b688780cd21fa3a48deaa56698c52e/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb"},{"edbId":42966,"kind":"exploit","title":"Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution (2)","url":"https://www.exploit-db.com/exploits/42966","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/jsp/webapps/42966.py","file":"exploits/jsp/webapps/42966.py","published":"2017-10-09","added":"2017-10-09","updated":"2021-04-14","author":"intx0x80","type":"webapps","platform":"jsp","port":null,"verified":true,"codes":["CVE-2017-12617"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/cyberheartmi9/CVE-2017-12617"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 15 April 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.securityfocus.com/bid/100954","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"http://www.securitytracker.com/id/1039552","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3080","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3081","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3113","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2017:3114","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0268","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0269","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0270","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0271","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0275","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0465","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0466","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2939","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E","tags":["Issue Tracking","Mailing List"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E","tags":["Mailing List","Patch"],"source":"security@apache.org"},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html","tags":["Mailing List","Third Party Advisory"],"source":"security@apache.org"},{"url":"https://security.netapp.com/advisory/ntap-20171018-0002/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://security.netapp.com/advisory/ntap-20180117-0002/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://support.f5.com/csp/article/K53173544","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://usn.ubuntu.com/3665-1/","tags":["Third Party Advisory"],"source":"security@apache.org"},{"url":"https://www.exploit-db.com/exploits/42966/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"https://www.exploit-db.com/exploits/43008/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"security@apache.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["Patch","Third Party Advisory"],"source":"security@apache.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/100954","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1039552","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3080","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3081","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3113","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:3114","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0268","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0269","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0270","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0271","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0275","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0465","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0466","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-12617","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}