USN-7282-1
Advisory lineage Upstream: 4 Downstream: 0
Published: 21 Feb 2025, 00:19
Last modified:20 May 2026, 16:03
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Feb 2025, 00:19
Published
Vulnerability first disclosed
20 May 2026, 16:03
Last Modified
Vulnerability information updated
Description
tomcat7 vulnerabilities It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP file to the server and execute arbitrary code.
Affected Systems
- ubuntu•tomcat7
< 7.0.68-1ubuntu0.4+esm3