Skip to content
OpenAdvisories

Archive

11 August 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2017-6327 Exploited Public exploit EPSS 36%

    The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a sit…

    KEV Nov 3, 2021
  • High 7.5

    Apache Tomcat vulnerable to SecurityManager bypass

    A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Se…

  • High 7.5
    CVE-2017-7675 EPSS 10%

    Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat

    The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.