Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-5648

35
FAUCET Score

CVE-2017-5648 is a critical vulnerability affecting Apache Tomcat versions 9.0.0.M1-M17, 8.5.0-8.5.11, 8.0.0.RC1-8.0.41, and 7.0.0-7.0.75. It allows an untrusted application running under a SecurityManager to retain references to request/response objects, potentially accessing or modifying data from other web applications. With a CVSS score of 9.1 (CRITICAL), this network-exploitable flaw has high confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
7.0.0CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
7.0.1CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
7.0.2CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
7.0.3CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
7.0.4CPE matchmatch criteria
cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

9.1CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
5.2
CvssVersion
3.0

Exploit Intelligence

EPSS Score
13.23%
Probability of exploitation in next 30 days
EPSS Percentile
96.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.1323 is in the 92nd percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (24)

mavenpatch availablevia ghsa
Product: org.apache.tomcat:tomcat-catalinaFixed in: 7.0.76
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 9.0.0.M18
mavenpatch availablevia ghsa
Product: org.apache.tomcat:tomcat-catalinaFixed in: 9.0.0.M18
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 8.5.13
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 8.0.42
mavenpatch availablevia ghsa
Product: org.apache.tomcat.embed:tomcat-embed-coreFixed in: 7.0.76
mavenpatch availablevia ghsa
Product: org.apache.tomcat:tomcat-catalinaFixed in: 8.5.13
mavenpatch availablevia ghsa
Product: org.apache.tomcat:tomcat-catalinaFixed in: 8.0.42
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat8-0:8.0.36-24.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat-native-0:1.2.8-10.redhat_10.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat8-0:8.0.36-24.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: tomcat-0:7.0.69-12.el7_3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: log4j-eap6-0:1.2.16-12.redhat_3.1.ep6.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat7-0:7.0.70-22.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 6Fixed in: tomcat-native-0:1.2.8-10.redhat_10.ep7.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: log4j-eap6-0:1.2.16-12.redhat_3.1.ep6.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3 for RHEL 7Fixed in: tomcat7-0:7.0.70-22.ep7.el7
View patch
redhatno patchvia redhat_api
Product: Red Hat JBoss Web Server 3Fixed in: tomcat7
redhatno patchvia redhat_api
Product: Red Hat JBoss Web Server 3Fixed in: tomcat8
redhatend of lifevia redhat_api
Product: Red Hat JBoss BRMS 5Fixed in: jbossweb
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Web Server 2Fixed in: tomcat7
redhatend of lifevia redhat_api
Product: Red Hat JBoss Fuse Service Works 6Fixed in: jbossweb
redhatend of lifevia redhat_api
Product: Red Hat JBoss SOA Platform 5Fixed in: jbossweb

Vendor Advisories (2)

mavenGHSA-3vx3-xf6q-r5xpcritical

Exposure of Resource to Wrong Sphere in Apache Tomcat

May 13, 2022
redhatCVE-2017-5648Moderate

tomcat: Calls to application listeners did not use the appropriate facade object

Apr 10, 2017

References

access.redhat.com / errata/RHSA-2017:1801
access.redhat.com / errata/RHSA-2017:1802
access.redhat.com / errata/RHSA-2017:1809
lists.apache.org / thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E
lists.apache.org / thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
lists.apache.org / thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
security.gentoo.org / glsa/201705-09
security.netapp.com / advisory/ntap-20180614-0001
debian.org / security/2017/dsa-3842
debian.org / security/2017/dsa-3843
openwall.com / lists/oss-security/2020/07/20/8
securityfocus.com / bid/97530
Third Party AdvisoryVDB Entry
securitytracker.com / id/1038220