GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    BDU:2023-01045 (CVE-2017-12617)

    Vulnerability from fstec – Published: 2023-03-06 – Updated: 2025-02-06 – View on bdu.fstec.ru Exploit publicly available Yes Fixed
    VLAI
    Title
    Уязвимость сервера приложений Apache Tomcat, связанная с отсутствием ограничений на загрузку файлов, позволяющая нарушителю выполнить произвольный код
    Summary
    Уязвимость сервера приложений Apache Tomcat связана с отсутствием ограничений на загрузку файлов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с помощью специально созданного JSP файла
    Severity
    9.3 (High) CVSS 2.0
    AV:N/AC:M/Au:N/C:C/I:C/A:C
    8.1 (High) CVSS 3.0
    CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    Class
    Code vulnerability
    Status
    Confirmed by the vendor
    Exploitation
    Spoofing
    Incidents
    Yes
    Remediation
    Software update
    CWE
    • CWE-434 - Неограниченная загрузка файлов опасного типа
    Aliases
    CVE-2017-12617, EDB-ID42966, EDB-ID43008
    References
    URL
    https://www.ibm.com/blogs/psirt/security-bulletin-cloud-pak-for-security-contai…
    http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
    http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
    http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
    http://www.securityfocus.com/bid/100954
    http://www.securitytracker.com/id/1039552
    https://access.redhat.com/errata/RHSA-2017:3080
    https://access.redhat.com/errata/RHSA-2017:3081
    https://access.redhat.com/errata/RHSA-2017:3113
    https://access.redhat.com/errata/RHSA-2017:3114
    https://access.redhat.com/errata/RHSA-2018:0268
    https://access.redhat.com/errata/RHSA-2018:0269
    https://access.redhat.com/errata/RHSA-2018:0270
    https://access.redhat.com/errata/RHSA-2018:0271
    https://access.redhat.com/errata/RHSA-2018:0275
    https://access.redhat.com/errata/RHSA-2018:0465
    https://access.redhat.com/errata/RHSA-2018:0466
    https://access.redhat.com/errata/RHSA-2018:2939
    https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55…
    https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e…
    https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3…
    https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f…
    https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022a…
    https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b1…
    https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d…
    https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d8…
    https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa7…
    https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429…
    https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df55…
    https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7…
    https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffaf…
    https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a545…
    https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741…
    https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855…
    https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83…
    https://lists.debian.org/debian-lts-announce/2017/11/msg00009.html
    https://security.netapp.com/advisory/ntap-20171018-0002/
    https://security.netapp.com/advisory/ntap-20180117-0002/
    https://support.f5.com/csp/article/K53173544
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hp…
    https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hp…
    https://usn.ubuntu.com/3665-1/
    https://www.exploit-db.com/exploits/42966/
    https://www.exploit-db.com/exploits/43008/
    https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
    https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
    Impacted products
    Vendors
    Red Hat, Inc., Canonical Ltd., Oracle Corp., Apache Software Foundation
    Products
    Red Hat Enterprise Linux, Ubuntu, WebCenter Sites, Oracle Transportation Management, Oracle Endeca Information Discovery Integrator, Oracle Retail Order Broker, Instantis EnterpriseTrack, FMW Platform, Communications Application Session Controller, Oracle Hospitality Guest Access, Oracle Agile PLM, MICROS Retail XBRi Loss Prevention, Tomcat, Enterprise Manager for MySQL Database, Financial Services Analytical Applications Infrastructure, Management Pack for Oracle GoldenGate, Oracle Tuxedo System and Applications Monitor, Oracle Health Sciences Empirica Inspections, MySQL Enterprise Monitor, Oracle Retail Convenience and Fuel POS Software
    Versions
    6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 17.10 (Ubuntu), 18.04 LTS (Ubuntu), 11.1.1.8.0 (WebCenter Sites), 6.3.7 (Oracle Transportation Management), 3.2.0 (Oracle Endeca Information Discovery Integrator), 3.1.0 (Oracle Endeca Information Discovery Integrator), 15.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 12.2.1.3.0 (FMW Platform), 3.7.1 (Communications Application Session Controller), 3.8.0 (Communications Application Session Controller), 14.04 ESM (Ubuntu), 4.2.0 (Oracle Hospitality Guest Access), 4.2.1 (Oracle Hospitality Guest Access), 9.3.3 (Oracle Agile PLM), 9.3.5 (Oracle Agile PLM), 9.3.6 (Oracle Agile PLM), 9.3.4 (Oracle Agile PLM), 5.0 (Oracle Retail Order Broker), 16.04 ESM (Ubuntu), 10.0.1 (MICROS Retail XBRi Loss Prevention), 10.5.0 (MICROS Retail XBRi Loss Prevention), 10.6.0 (MICROS Retail XBRi Loss Prevention), 10.7.0 (MICROS Retail XBRi Loss Prevention), 10.8.0 (MICROS Retail XBRi Loss Prevention), 10.8.1 (MICROS Retail XBRi Loss Prevention), от 9.0.0.M1 до 9.0.0 включительно (Tomcat), от 8.5.0 до 8.5.22 включительно (Tomcat), от 8.0.0.RC1 до 8.0.46 включительно (Tomcat), от 7.0.0 до 7.0.81 включительно (Tomcat), 12.1.0.4 (Enterprise Manager for MySQL Database), 7.3.0 (Financial Services Analytical Applications Infrastructure), 8.0.0 (Financial Services Analytical Applications Infrastructure), 11.2.1.0.13 (Management Pack for Oracle GoldenGate), 12.2.0.1 (Tomcat), 12.1.3.0.0 (Oracle Tuxedo System and Applications Monitor), 1.0.1.1 (Oracle Health Sciences Empirica Inspections), до 3.3.6.3293 включительно (MySQL Enterprise Monitor), до 3.4.4.4226 включительно (MySQL Enterprise Monitor), до 4.0.0.5135 включительно (MySQL Enterprise Monitor), 6.3.1 (Oracle Transportation Management), 6.3.2 (Oracle Transportation Management), 6.3.3 (Oracle Transportation Management), 6.3.4 (Oracle Transportation Management), 6.3.5 (Oracle Transportation Management), 6.3.6 (Oracle Transportation Management), 12.2.1.2.0 (FMW Platform), 2.1.132 (Oracle Retail Convenience and Fuel POS Software)
    Product types
    Operating system, Security software, Application software, Network software
    Platforms
    Red Hat, Inc. Red Hat Enterprise Linux 6, Inc. Red Hat Enterprise Linux 7, Canonical Ltd. Ubuntu 17.10, Canonical Ltd. Ubuntu 18.04 LTS, Canonical Ltd. Ubuntu 14.04 ESM, Canonical Ltd. Ubuntu 16.04 ESM
    Mitigations
    Использование рекомендаций: Для Apache Tomcat: https://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb@%3Cannounce.tomcat.apache.org%3E Для программных продуктов Red Hat Inc.: https://access.redhat.com/security/cve/CVE-2017-12617?extIdCarryOver=true&sc_cid=701f2000001OH6kAAG Для Ubuntu: https://ubuntu.com/security/notices/USN-3665-1 Для программных продуктов Oracle Corp.: https://www.oracle.com/security-alerts/cpuapr2018.html https://www.oracle.com/security-alerts/cpujan2018.html https://www.oracle.com/security-alerts/cpujul2018.html https://www.oracle.com/security-alerts/cpuapr2019.html
    To clipboard 

    {
  "CVSS 2.0": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat, Inc., Canonical Ltd., Oracle Corp., Apache Software Foundation",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 17.10 (Ubuntu), 18.04 LTS (Ubuntu), 11.1.1.8.0 (WebCenter Sites), 6.3.7 (Oracle Transportation Management), 3.2.0 (Oracle Endeca Information Discovery Integrator), 3.1.0 (Oracle Endeca Information Discovery Integrator), 15.0 (Oracle Retail Order Broker), 17.1 (Instantis EnterpriseTrack), 17.2 (Instantis EnterpriseTrack), 12.2.1.3.0 (FMW Platform), 3.7.1 (Communications Application Session Controller), 3.8.0 (Communications Application Session Controller), 14.04 ESM (Ubuntu), 4.2.0 (Oracle Hospitality Guest Access), 4.2.1 (Oracle Hospitality Guest Access), 9.3.3 (Oracle Agile PLM), 9.3.5 (Oracle Agile PLM), 9.3.6 (Oracle Agile PLM), 9.3.4 (Oracle Agile PLM), 5.0 (Oracle Retail Order Broker), 16.04 ESM (Ubuntu), 10.0.1 (MICROS Retail XBRi Loss Prevention), 10.5.0 (MICROS Retail XBRi Loss Prevention), 10.6.0 (MICROS Retail XBRi Loss Prevention), 10.7.0 (MICROS Retail XBRi Loss Prevention), 10.8.0 (MICROS Retail XBRi Loss Prevention), 10.8.1 (MICROS Retail XBRi Loss Prevention), \u043e\u0442 9.0.0.M1 \u0434\u043e 9.0.0 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 8.5.0 \u0434\u043e 8.5.22 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 8.0.0.RC1 \u0434\u043e 8.0.46 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), \u043e\u0442 7.0.0 \u0434\u043e 7.0.81 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Tomcat), 12.1.0.4 (Enterprise Manager for MySQL Database), 7.3.0 (Financial Services Analytical Applications Infrastructure), 8.0.0 (Financial Services Analytical Applications Infrastructure), 11.2.1.0.13 (Management Pack for Oracle GoldenGate), 12.2.0.1 (Tomcat), 12.1.3.0.0 (Oracle Tuxedo System and Applications Monitor), 1.0.1.1 (Oracle Health Sciences Empirica Inspections), \u0434\u043e 3.3.6.3293 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (MySQL Enterprise Monitor), \u0434\u043e 3.4.4.4226 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (MySQL Enterprise Monitor), \u0434\u043e 4.0.0.5135 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (MySQL Enterprise Monitor), 6.3.1 (Oracle Transportation Management), 6.3.2 (Oracle Transportation Management), 6.3.3 (Oracle Transportation Management), 6.3.4 (Oracle Transportation Management), 6.3.5 (Oracle Transportation Management), 6.3.6 (Oracle Transportation Management), 12.2.1.2.0 (FMW Platform), 2.1.132 (Oracle Retail Convenience and Fuel POS Software)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Apache Tomcat:\nhttps://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb@%3Cannounce.tomcat.apache.org%3E \n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/CVE-2017-12617?extIdCarryOver=true\u0026sc_cid=701f2000001OH6kAAG\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/notices/USN-3665-1\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle Corp.:\nhttps://www.oracle.com/security-alerts/cpuapr2018.html\nhttps://www.oracle.com/security-alerts/cpujan2018.html\nhttps://www.oracle.com/security-alerts/cpujul2018.html\nhttps://www.oracle.com/security-alerts/cpuapr2019.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.10.2017",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.02.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.03.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-01045",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2017-12617, EDB-ID42966, EDB-ID43008",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Ubuntu, WebCenter Sites, Oracle Transportation Management, Oracle Endeca Information Discovery Integrator, Oracle Retail Order Broker, Instantis EnterpriseTrack, FMW Platform, Communications Application Session Controller, Oracle Hospitality Guest Access, Oracle Agile PLM, MICROS Retail XBRi Loss Prevention, Tomcat, Enterprise Manager for MySQL Database, Financial Services Analytical Applications Infrastructure, Management Pack for Oracle GoldenGate, Oracle Tuxedo System and Applications Monitor, Oracle Health Sciences Empirica Inspections, MySQL Enterprise Monitor, Oracle Retail Convenience and Fuel POS Software",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat, Inc. Red Hat Enterprise Linux 6 , Red Hat, Inc. Red Hat Enterprise Linux 7 , Canonical Ltd. Ubuntu 17.10 , Canonical Ltd. Ubuntu 18.04 LTS , Canonical Ltd. Ubuntu 14.04 ESM , Canonical Ltd. Ubuntu 16.04 ESM ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Apache Tomcat, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430 (CWE-434)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Apache Tomcat \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e JSP \u0444\u0430\u0439\u043b\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.ibm.com/blogs/psirt/security-bulletin-cloud-pak-for-security-contains-packages-that-have-multiple-vulnerabilities/\nhttp://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html \nhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html \nhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html \nhttp://www.securityfocus.com/bid/100954 \nhttp://www.securitytracker.com/id/1039552 \nhttps://access.redhat.com/errata/RHSA-2017:3080 \nhttps://access.redhat.com/errata/RHSA-2017:3081 \nhttps://access.redhat.com/errata/RHSA-2017:3113 \nhttps://access.redhat.com/errata/RHSA-2017:3114 \nhttps://access.redhat.com/errata/RHSA-2018:0268 \nhttps://access.redhat.com/errata/RHSA-2018:0269 \nhttps://access.redhat.com/errata/RHSA-2018:0270 \nhttps://access.redhat.com/errata/RHSA-2018:0271 \nhttps://access.redhat.com/errata/RHSA-2018:0275 \nhttps://access.redhat.com/errata/RHSA-2018:0465 \nhttps://access.redhat.com/errata/RHSA-2018:0466 \nhttps://access.redhat.com/errata/RHSA-2018:2939 \nhttps://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/3fd341a604c4e9eab39e7eaabbbac39c30101a022acc11dd09d7ebcb@%3Cannounce.tomcat.apache.org%3E\nhttps://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E \nhttps://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E \nhttps://lists.debian.org/debian-lts-announce/2017/11/msg00009.html \nhttps://security.netapp.com/advisory/ntap-20171018-0002/ \nhttps://security.netapp.com/advisory/ntap-20180117-0002/ \nhttps://support.f5.com/csp/article/K53173544 \nhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03812en_us \nhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03828en_us \nhttps://usn.ubuntu.com/3665-1/ \nhttps://www.exploit-db.com/exploits/42966/ \nhttps://www.exploit-db.com/exploits/43008/ \nhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\nhttps://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0437\u0430\u0449\u0438\u0442\u044b, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-434",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,1)"
}