UpHeron
All vulnerabilities

Servers and applications

CVE-2017-12616

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

Severity
High 7.5
Published
19 Sept 2017
Last changed
15 Oct 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • Version 7.0.80
  • Version 7.0.79
  • Version 7.0.77
  • Version 7.0.76
All 82 release lines
  • Version 7.0.0-beta
  • Version 7.0.0
  • Version 7.0.1
  • Version 7.0.2-beta
  • Version 7.0.2
  • Version 7.0.3
  • Version 7.0.4-beta
  • Version 7.0.4
  • Version 7.0.5-beta
  • Version 7.0.5
  • Version 7.0.6
  • Version 7.0.7
  • Version 7.0.8
  • Version 7.0.9
  • Version 7.0.10
  • Version 7.0.11
  • Version 7.0.12
  • Version 7.0.13
  • Version 7.0.14
  • Version 7.0.15
  • Version 7.0.16
  • Version 7.0.17
  • Version 7.0.18
  • Version 7.0.19
  • Version 7.0.20
  • Version 7.0.21
  • Version 7.0.22
  • Version 7.0.23
  • Version 7.0.24
  • Version 7.0.25
  • Version 7.0.26
  • Version 7.0.27
  • Version 7.0.28
  • Version 7.0.29
  • Version 7.0.30
  • Version 7.0.31
  • Version 7.0.32
  • Version 7.0.33
  • Version 7.0.34
  • Version 7.0.35
  • Version 7.0.36
  • Version 7.0.37
  • Version 7.0.38
  • Version 7.0.39
  • Version 7.0.40
  • Version 7.0.41
  • Version 7.0.42
  • Version 7.0.43
  • Version 7.0.44
  • Version 7.0.45
  • Version 7.0.46
  • Version 7.0.47
  • Version 7.0.48
  • Version 7.0.49
  • Version 7.0.50
  • Version 7.0.51
  • Version 7.0.54
  • Version 7.0.55
  • Version 7.0.56
  • Version 7.0.57
  • Version 7.0.58
  • Version 7.0.59
  • Version 7.0.60
  • Version 7.0.61
  • Version 7.0.62
  • Version 7.0.63
  • Version 7.0.64
  • Version 7.0.65
  • Version 7.0.66
  • Version 7.0.67
  • Version 7.0.68
  • Version 7.0.69
  • Version 7.0.70
  • Version 7.0.71
  • Version 7.0.72
  • Version 7.0.73
  • Version 7.0.74
  • Version 7.0.75
  • Version 7.0.76
  • Version 7.0.77
  • Version 7.0.79
  • Version 7.0.80

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-12616
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-12616