CVE-2017-12616EPSS p99.4%

CVE-2017-12616CVE-2017-12616

apache / tomcat

Description

When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request.

Scoring

CVSS 7.5 ()
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS70.12% probability of exploitation · percentile 99.4% · 2026-10-16T12:02:51Z
Last modified2026-10-15
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.