CVE-2017-5664Published

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that t…

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2017-5664

Published

Apache Tomcat

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "product": "Apache Tomcat",
                    "vendor": "Apache Software Foundation",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "9.0.0.M1 to 9.0.0.M20"
                        },
                        {
                            "status": "affected",
                            "version": "8.5.0 to 8.5.14"
                        },
                        {
                            "status": "affected",
                            "version": "8.0.0.RC1 to 8.0.43"
                        },
                        {
                            "status": "affected",
                            "version": "7.0.0 to 7.0.77"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON