01 Record

CVE-2017-5664

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are

UnratedPUBLISHEDCNA: apache

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 16.57% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 96.8% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2017-06-06 14:00Z9 YR AGO

Last updated

2024-08-05 15:11Z2 YR AGO

Reserved

2017-01-29

Assigning CNA

apache

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-755Improper Handling of Exceptional ConditionsClass
CWE-266Incorrect Privilege AssignmentBase

Data version

5.1

Document digest

9d455eaf70a32e66e6ad5d4c840f3a2e0c2d3d71b54e8c9345053110bbe1a5a2

05 Affected products

VendorProductVersionsPlatforms

Apache Software FoundationApache Tomcat9.0.0.M1 to 9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43, 7.0.0 to 7.0.77—

06 References

www.debian.orgDSA-3891http://www.debian.org/security/2017/dsa-3891vendor-advisoryx_refsource_DEBIAN
security.netapp.comhttps://security.netapp.com/advisory/ntap-20171019-0002/x_refsource_CONFIRM
www.securityfocus.com98888http://www.securityfocus.com/bid/98888vdb-entryx_refsource_BID
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlx_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlx_refsource_CONFIRM
access.redhat.comRHSA-2017:3080https://access.redhat.com/errata/RHSA-2017:3080vendor-advisoryx_refsource_REDHAT
support.hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_usx_refsource_CONFIRM
access.redhat.comRHSA-2017:1801https://access.redhat.com/errata/RHSA-2017:1801vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:2635https://access.redhat.com/errata/RHSA-2017:2635vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:2638https://access.redhat.com/errata/RHSA-2017:2638vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:2494https://access.redhat.com/errata/RHSA-2017:2494vendor-advisoryx_refsource_REDHAT
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlx_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.htmlx_refsource_CONFIRM
lists.apache.org[tomcat-users] 20170606 [SECURITY] CVE-2017-5664 Apache Tomcat Security Constraint Bypasshttps://lists.apache.org/thread.html/a42c48e37398d76334e17089e43ccab945238b8b7896538478d76066%40%3Cannounce.tomcat.apache.org%3Emailing-listx_refsource_MLIST
access.redhat.comRHSA-2017:2636https://access.redhat.com/errata/RHSA-2017:2636vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:1809https://access.redhat.com/errata/RHSA-2017:1809vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:2637https://access.redhat.com/errata/RHSA-2017:2637vendor-advisoryx_refsource_REDHAT
www.securitytracker.com1038641http://www.securitytracker.com/id/1038641vdb-entryx_refsource_SECTRACK
www.debian.orgDSA-3892http://www.debian.org/security/2017/dsa-3892vendor-advisoryx_refsource_DEBIAN
access.redhat.comRHSA-2017:2633https://access.redhat.com/errata/RHSA-2017:2633vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:1802https://access.redhat.com/errata/RHSA-2017:1802vendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:2493https://access.redhat.com/errata/RHSA-2017:2493vendor-advisoryx_refsource_REDHAT
lists.apache.org[tomcat-dev] 20190319 svn commit: r1855831 [24/30] - in /tomcat/site/trunk: ./ docs/ xdocs/https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190325 svn commit: r1856174 [23/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190413 svn commit: r1857496 [3/4] - in /tomcat/site/trunk: ./ docs/ xdocs/https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190415 svn commit: r1857582 [18/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlx_refsource_MISC
www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlx_refsource_MISC
lists.apache.org[tomcat-dev] 20200203 svn commit: r1873527 [25/30] - /tomcat/site/trunk/docs/https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST
lists.apache.org[tomcat-dev] 20200213 svn commit: r1873980 [29/34] - /tomcat/site/trunk/docs/https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3Emailing-listx_refsource_MLIST

01 Record index

CVE-2017-5664

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2017-5664

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References