CVE-2017-15706

Risk Scores

Affected Products

Exploit Intelligence

• [announce] 20180131 [SECURITY] CVE-2017-15706 Apache Tomcat Incorrectly documented CGI search algorithm (circl)
• USN-3665-1 (circl)
• 103069 (circl)
• [tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ (circl)
• [tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ (circl)
• [tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ (circl)
• [tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ (circl)
• [tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ (circl)
• [tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/ (circl)
• [tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/ (circl)

…and 10 more exploits

Timeline

• Jan 31, 2018 CVE Published
• Apr 15, 2019 CVE Updated
• Apr 14, 2021 EPSS Score
• Jun 23, 2021 EPSS Score
• Oct 26, 2021 EPSS Score
• Dec 27, 2021 EPSS Score
• Feb 4, 2022 EPSS Score
• Feb 28, 2022 EPSS Score
• Jul 3, 2022 EPSS Score
• Sep 5, 2022 EPSS Score
• Nov 6, 2022 EPSS Score
• Jan 8, 2023 EPSS Score

References

• ALAS-2018-973: tomcat80 (medium) advisory
• ALAS-2018-959: tomcat8 (low) advisory
• ALAS-2018-947: tomcat7 (low) advisory