Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-12617 Details

Description

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12617	CISA-ADP	US Government Resource
https://access.redhat.com/errata/RHSA-2017:3080	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3081	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0268	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0269	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0270	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0271	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0275	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0465	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0466	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2939	CVE	Third Party Advisory
https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E	CVE	Issue TrackingMailing List
https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	CVE	Mailing ListPatch
https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html	CVE	Mailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20171018-0002/	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20180117-0002/	CVE	Third Party Advisory
https://support.f5.com/csp/article/K53173544	CVE	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us	CVE	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us	CVE	Third Party Advisory
https://usn.ubuntu.com/3665-1/	CVE	Third Party Advisory
https://www.exploit-db.com/exploits/42966/	CVE	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/43008/	CVE	ExploitThird Party AdvisoryVDB Entry
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	CVE	PatchThird Party Advisory
http://www.securityfocus.com/bid/100954	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039552	CVE	Broken LinkThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:3080	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3081	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3113	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3114	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0268	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0269	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0270	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0271	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0275	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0465	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0466	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2939	[email protected]	Third Party Advisory
https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb%40%3Cannounce.tomcat.apache.org%3E	[email protected]	Issue TrackingMailing List
https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E	[email protected]	Mailing ListPatch
https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html	[email protected]	Mailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20171018-0002/	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20180117-0002/	[email protected]	Third Party Advisory
https://support.f5.com/csp/article/K53173544	[email protected]	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03812en_us	[email protected]	Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us	[email protected]	Third Party Advisory
https://usn.ubuntu.com/3665-1/	[email protected]	Third Party Advisory
https://www.exploit-db.com/exploits/42966/	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/43008/	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	[email protected]	PatchThird Party Advisory
http://www.securityfocus.com/bid/100954	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039552	[email protected]	Broken LinkThird Party AdvisoryVDB Entry

see all 89 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Apache Tomcat Remote Code Execution Vulnerability	Mar 25, 2022	Apr 15, 2022	Apply updates per vendor instructions.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-434	Unrestricted Upload of File with Dangerous Type	[email protected]
CWE-434	Unrestricted Upload of File with Dangerous Type	CISA-ADP

Affected Products

Product	Versions
apache tomcat	>= 7.0.0, < 7.0.82 >= 8.0, < 8.0.47 >= 8.5.0, < 8.5.23 >= 9.0.0, < 9.0.1
CPE cpe:2.3:a:apache:tomcat:::::::: Remediation No remediation found in references.
canonical ubuntu linux	12.04 16.04 17.10 18.04
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:17.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:18.04::::esm::: Remediation No remediation found in references.
oracle agile product lifecycle management	9.3.3 9.3.4 9.3.5 9.3.6
CPE cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.3:::::::* cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.4:::::::* cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.5:::::::* cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:::::::* Remediation No remediation found in references.
oracle communications instant messaging server	10.0.1
CPE cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1:::::::* Remediation No remediation found in references.
oracle endeca information discovery integrator	3.1.0 3.2.0
CPE cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.1.0:::::::* cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0:::::::* Remediation No remediation found in references.
oracle enterprise manager for mysql database	12.1.0.4.0
CPE cpe:2.3:a:oracle:enterprise_manager_for_mysql_database:12.1.0.4.0:::::::* Remediation No remediation found in references.
oracle financial services analytical applications infrastructure	>= 7.3.3.0.0, <= 7.3.5.3.0 >= 8.0.0.0.0, <= 8.0.9.0.0
CPE cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:::::::: Remediation No remediation found in references.
oracle fmw platform	12.2.1.2.0 12.2.1.3.0
CPE cpe:2.3:a:oracle:fmw_platform:12.2.1.2.0:::::::* cpe:2.3:a:oracle:fmw_platform:12.2.1.3.0:::::::* Remediation No remediation found in references.
oracle health sciences empirica inspections	1.0.1.1
CPE cpe:2.3:a:oracle:health_sciences_empirica_inspections:1.0.1.1:::::::* Remediation No remediation found in references.
oracle hospitality guest access	4.2.0 4.2.1
CPE cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:::::::* cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:::::::* Remediation No remediation found in references.
oracle instantis enterprisetrack	17.1 17.2
CPE cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:::::::* cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:::::::* Remediation No remediation found in references.
oracle management pack	11.2.1.0.13
CPE cpe:2.3:a:oracle:management_pack:11.2.1.0.13:::::goldengate:: Remediation No remediation found in references.
oracle micros lucas	2.9.5
CPE cpe:2.3:a:oracle:micros_lucas:2.9.5:::::::* Remediation No remediation found in references.
oracle micros retail xbri loss prevention	10.0.1 10.5.0 10.6.0 10.7.0 10.8.0
CPE cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1:::::::* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0:::::::* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0:::::::* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0:::::::* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0:::::::* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1:::::::* Remediation No remediation found in references.
oracle mysql enterprise monitor	<= 3.3.6.3293 >= 3.4.0, <= 3.4.4.4226 >= 4.0.0, <= 4.0.0.5135
CPE cpe:2.3:a:oracle:mysql_enterprise_monitor:::::::: Remediation No remediation found in references.
oracle retail advanced inventory planning	13.2 13.4 14.1 15.0
CPE cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.2:::::::* cpe:2.3:a:oracle:retail_advanced_inventory_planning:13.4:::::::* cpe:2.3:a:oracle:retail_advanced_inventory_planning:14.1:::::::* cpe:2.3:a:oracle:retail_advanced_inventory_planning:15.0:::::::* Remediation No remediation found in references.
oracle retail back office	14.0.4 14.1.3
CPE cpe:2.3:a:oracle:retail_back_office:14.0.4:::::::* cpe:2.3:a:oracle:retail_back_office:14.1.3:::::::* Remediation No remediation found in references.
oracle retail central office	14.0.4 14.1.3
CPE cpe:2.3:a:oracle:retail_central_office:14.0.4:::::::* cpe:2.3:a:oracle:retail_central_office:14.1.3:::::::* Remediation No remediation found in references.
oracle retail convenience and fuel pos software	2.1.132
CPE cpe:2.3:a:oracle:retail_convenience_and_fuel_pos_software:2.1.132:::::::* Remediation No remediation found in references.
oracle retail eftlink	1.1.124 15.0.1 16.0.2
CPE cpe:2.3:a:oracle:retail_eftlink:1.1.124:::::::* cpe:2.3:a:oracle:retail_eftlink:15.0.1:::::::* cpe:2.3:a:oracle:retail_eftlink:16.0.2:::::::* Remediation No remediation found in references.
oracle retail insights	14.0 14.1 15.0 16.0
CPE cpe:2.3:a:oracle:retail_insights:14.0:::::::* cpe:2.3:a:oracle:retail_insights:14.1:::::::* cpe:2.3:a:oracle:retail_insights:15.0:::::::* cpe:2.3:a:oracle:retail_insights:16.0:::::::* Remediation No remediation found in references.
oracle retail invoice matching	12.0 13.0 13.1 13.2 14.0
CPE cpe:2.3:a:oracle:retail_invoice_matching:12.0:::::::* cpe:2.3:a:oracle:retail_invoice_matching:13.0:::::::* cpe:2.3:a:oracle:retail_invoice_matching:13.1:::::::* cpe:2.3:a:oracle:retail_invoice_matching:13.2:::::::* cpe:2.3:a:oracle:retail_invoice_matching:14.0:::::::* cpe:2.3:a:oracle:retail_invoice_matching:14.1:::::::* cpe:2.3:a:oracle:retail_invoice_matching:15.0:::::::* cpe:2.3:a:oracle:retail_invoice_matching:16.0:::::::* Remediation No remediation found in references.
oracle retail order broker	5.0 5.1 5.2 15.0 16.0
CPE cpe:2.3:a:oracle:retail_order_broker:5.0:::::::* cpe:2.3:a:oracle:retail_order_broker:5.1:::::::* cpe:2.3:a:oracle:retail_order_broker:5.2:::::::* cpe:2.3:a:oracle:retail_order_broker:15.0:::::::* cpe:2.3:a:oracle:retail_order_broker:16.0:::::::* Remediation No remediation found in references.
oracle retail order management system	4.0 4.5 4.7 5.0
CPE cpe:2.3:a:oracle:retail_order_management_system:4.0:::::::* cpe:2.3:a:oracle:retail_order_management_system:4.5:::::::* cpe:2.3:a:oracle:retail_order_management_system:4.7:::::::* cpe:2.3:a:oracle:retail_order_management_system:5.0:::::::* Remediation No remediation found in references.
oracle retail point-of-service	14.0.4 14.1.3
CPE cpe:2.3:a:oracle:retail_point-of-service:14.0.4:::::::* cpe:2.3:a:oracle:retail_point-of-service:14.1.3:::::::* Remediation No remediation found in references.
oracle retail price management	12.0 13.0 13.1 13.2 14.0
CPE cpe:2.3:a:oracle:retail_price_management:12.0:::::::* cpe:2.3:a:oracle:retail_price_management:13.0:::::::* cpe:2.3:a:oracle:retail_price_management:13.1:::::::* cpe:2.3:a:oracle:retail_price_management:13.2:::::::* cpe:2.3:a:oracle:retail_price_management:14.0:::::::* cpe:2.3:a:oracle:retail_price_management:14.1:::::::* cpe:2.3:a:oracle:retail_price_management:15.0:::::::* cpe:2.3:a:oracle:retail_price_management:16.0:::::::* Remediation No remediation found in references.
oracle retail returns management	2.3.8 2.4.9 14.0.4 14.1.3
CPE cpe:2.3:a:oracle:retail_returns_management:2.3.8:::::::* cpe:2.3:a:oracle:retail_returns_management:2.4.9:::::::* cpe:2.3:a:oracle:retail_returns_management:14.0.4:::::::* cpe:2.3:a:oracle:retail_returns_management:14.1.3:::::::* Remediation No remediation found in references.
oracle retail store inventory management	12.0.12 13.0.7 13.1.9 13.2.9 14.0.4
CPE cpe:2.3:a:oracle:retail_store_inventory_management:12.0.12:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:13.0.7:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:13.1.9:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:13.2.9:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:15.0.2:::::::* cpe:2.3:a:oracle:retail_store_inventory_management:16.0.1:::::::* Remediation No remediation found in references.
oracle retail xstore point of service	6.0.11 7.0.6 7.1.6 15.0.1
CPE cpe:2.3:a:oracle:retail_xstore_point_of_service:6.0.11:::::::* cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0.6:::::::* cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1.6:::::::* cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0.1:::::::* Remediation No remediation found in references.
oracle transportation management	6.3.1 6.3.2 6.3.3 6.3.4 6.3.5
CPE cpe:2.3:a:oracle:transportation_management:6.3.1:::::::* cpe:2.3:a:oracle:transportation_management:6.3.2:::::::* cpe:2.3:a:oracle:transportation_management:6.3.3:::::::* cpe:2.3:a:oracle:transportation_management:6.3.4:::::::* cpe:2.3:a:oracle:transportation_management:6.3.5:::::::* cpe:2.3:a:oracle:transportation_management:6.3.6:::::::* cpe:2.3:a:oracle:transportation_management:6.3.7:::::::* Remediation No remediation found in references.
oracle tuxedo system and applications monitor	12.1.3.0.0
CPE cpe:2.3:a:oracle:tuxedo_system_and_applications_monitor:12.1.3.0.0:::::::* Remediation No remediation found in references.
oracle webcenter sites	11.1.1.8.0
CPE cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:::::::* Remediation No remediation found in references.
oracle workload manager	12.2.0.1
CPE cpe:2.3:a:oracle:workload_manager:12.2.0.1:::::::* Remediation No remediation found in references.
debian debian linux	7.0
CPE cpe:2.3:o:debian:debian_linux:7.0:::::::* Remediation No remediation found in references.
netapp active iq unified manager	>= 7.3 >= 9.5
CPE cpe:2.3:a:netapp:active_iq_unified_manager::::::windows::* cpe:2.3:a:netapp:active_iq_unified_manager::::::vmware_vsphere::* Remediation No remediation found in references.
netapp oncommand balance	All versions
CPE cpe:2.3:a:netapp:oncommand_balance:-:::::::* Remediation No remediation found in references.
netapp oncommand insight	All versions
CPE cpe:2.3:a:netapp:oncommand_insight:-:::::::* Remediation No remediation found in references.
netapp oncommand shift	All versions
CPE cpe:2.3:a:netapp:oncommand_shift:-:::::::* Remediation No remediation found in references.
netapp oncommand workflow automation	All versions
CPE cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::* Remediation No remediation found in references.
netapp snapcenter	All versions
CPE cpe:2.3:a:netapp:snapcenter:-:::::::* Remediation No remediation found in references.
netapp element	All versions
CPE cpe:2.3:o:netapp:element:-:::::vcenter_server:: Remediation No remediation found in references.
redhat fuse	1.0
CPE cpe:2.3:a:redhat:fuse:1.0:::::::* Remediation No remediation found in references.
redhat jboss enterprise application platform	6.0.0 6.4.0
CPE cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:::::::* cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:::::::* Remediation No remediation found in references.
redhat jboss enterprise web server	2.0.0 3.0.0
CPE cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:::::::* cpe:2.3:a:redhat:jboss_enterprise_web_server:3.0.0:::::::* Remediation No remediation found in references.
redhat jboss enterprise web server text-only advisories	All versions
CPE cpe:2.3:a:redhat:jboss_enterprise_web_server_text-only_advisories:-:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	7.4 7.5 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux eus compute node	7.4 7.5 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.5:::::::* cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux for ibm z systems	6.0_s390x 7.0_s390x
CPE cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:::::::* Remediation No remediation found in references.
redhat enterprise linux for ibm z systems eus	7.4_s390x 7.5_s390x 7.6_s390x 7.7_s390x
CPE cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6_s390x:::::::* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.7_s390x:::::::* Remediation No remediation found in references.
redhat enterprise linux for power big endian	6.0_ppc64 7.0_ppc64
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:::::::* Remediation No remediation found in references.
redhat enterprise linux for power big endian eus	7.4_ppc64 7.5_ppc64 7.6_ppc64 7.7_ppc64
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:::::::* Remediation No remediation found in references.
redhat enterprise linux for power little endian	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux for power little endian eus	7.4_ppc64le 7.5_ppc64le 7.6_ppc64le 7.7_ppc64le
CPE cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6_ppc64le:::::::* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.7_ppc64le:::::::* Remediation No remediation found in references.
redhat enterprise linux server	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server aus	7.4 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux server tus	7.4 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.

Change History

63 change records found show changes

Date	Action	Recorded By
Aug 25, 2026	CPE Deprecation Remap	[email protected]
Aug 25, 2026	CPE Deprecation Remap	[email protected]
Aug 25, 2026	CPE Deprecation Remap	[email protected]
Aug 25, 2026	CPE Deprecation Remap	[email protected]
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Apr 21, 2026	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Feb 6, 2025	Modified Analysis	[email protected]
Feb 4, 2025	CVE Modified	CISA-ADP
Jan 23, 2025	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Jul 16, 2024	Modified Analysis	[email protected]
May 14, 2024	CVE Modified	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Dec 8, 2023	CPE Deprecation Remap	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Feb 13, 2020	CVE Modified	[email protected]
Feb 3, 2020	CVE Modified	[email protected]
Apr 23, 2019	CVE Modified	[email protected]
Apr 15, 2019	CVE Modified	[email protected]
Apr 15, 2019	CVE Modified	[email protected]
Mar 25, 2019	CVE Modified	[email protected]
Mar 25, 2019	CVE Modified	[email protected]
Mar 21, 2019	CVE Modified	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Jul 19, 2018	CVE Modified	[email protected]
Jun 1, 2018	CVE Modified	[email protected]
May 10, 2018	CVE Modified	[email protected]
Apr 20, 2018	CVE Modified	[email protected]
Mar 9, 2018	CVE Modified	[email protected]
Feb 7, 2018	CVE Modified	[email protected]
Feb 4, 2018	CVE Modified	[email protected]
Jan 18, 2018	CVE Modified	[email protected]
Dec 2, 2017	CVE Modified	[email protected]
Nov 10, 2017	CVE Modified	[email protected]
Oct 23, 2017	Initial Analysis	[email protected]
Oct 20, 2017	CVE Modified	[email protected]
Oct 19, 2017	CVE Modified	[email protected]
Oct 12, 2017	CVE Modified	[email protected]
Oct 5, 2017	CVE Modified	[email protected]

CVE-2017-12617 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE