HPESBUX03828 rev.2 - HP-UX Tomcat-based Servlet Engine, Remote Cache Poisoning or Security Constraint Bypass

🗓️ 09 Mar 2018 00:00:00Reported by hpeType

HP-UX Tomcat-based Servlet Engine suffers remote cache poisoning and security bypass in 7.x D.7.0.77.01 and earlier; update to 7.0.84.01.

Reporter	Title	Published	Views	Family All 483
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	16 May 202116:14	–	gitee
Gitee	Exploit for Improper Input Validation in Apple Mac_Os_X	18 Nov 201916:59	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	27 Apr 202114:33	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	6 Jul 202503:24	–	gitee
Gitee	Exploit for Argument Injection in Phpmailer_Project Phpmailer	5 Dec 201914:28	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	22 Oct 202115:45	–	gitee
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Apache Tomcat affect IBM Rational License Key Server Administration and Reporting Tool	17 Jun 201805:23	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat Vulnerabilities affect Algo One - Core	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2017-7674, CVE-2017-7675)	15 Nov 201822:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-12615, CVE-2017-12616, CVE-2017-12617)	17 Jun 201805:23	–	ibm

Vulners

Node

02 Apr 2018 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

CVSS 37.5

CVSS 3.18.1

EPSS0.99988

SSVC