{"vulnerability": "CVE-2017-12149", "sightings": [{"uuid": "53055f45-8563-430a-8239-83ea77c3c328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "MISP/5c0fd6cc-f868-4dca-890c-1ea30a021402", "content": "", "creation_timestamp": "2018-12-11T15:50:28.000000Z"}, {"uuid": "c4e928e7-ac4e-4f98-ac4a-ebf7a743e9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "60373f10-2b69-4117-895a-6078f4046722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971186", "content": "", "creation_timestamp": "2024-12-24T20:25:33.495028Z"}, {"uuid": "9c233802-d8fd-4477-8eb3-f0d36f07720a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "565c2d1c-f8cd-4520-a156-528d16a5db11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-04)", "content": "", "creation_timestamp": "2025-01-04T00:00:00.000000Z"}, {"uuid": "64467944-3174-4107-9fb8-e04f90afb69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-02)", "content": "", "creation_timestamp": "2024-11-02T00:00:00.000000Z"}, {"uuid": "a18c99f2-8fbb-4475-90b0-47626d8919a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-21)", "content": "", "creation_timestamp": "2024-11-21T00:00:00.000000Z"}, {"uuid": "ae7e7a44-b15b-4acd-80f3-b646c4d91faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:52.000000Z"}, {"uuid": "ffb92d44-ebde-495f-a109-485ae66a394b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:14.000000Z"}, {"uuid": "0796ab53-a096-40a6-b0c6-4bcc48a3b941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "94107c4d-804c-4455-bd7e-0910d79413a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "content": "", "creation_timestamp": "2026-01-01T00:00:00.000000Z"}, {"uuid": "c64b1790-b01c-4d7f-bb83-0f48e11c286f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://gist.github.com/beerandgin/a999d21835751417f8d1ac219eec40a4", "content": "", "creation_timestamp": "2026-03-04T22:30:33.000000Z"}, {"uuid": "f50df728-b033-4110-a45a-2f070ec1f355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b30021e-4d23-4ec2-95e7-6fd1a039d016", "content": "", "creation_timestamp": "2026-02-02T12:25:26.980991Z"}, {"uuid": "4668c0a9-2800-4ba3-9e78-8de22bc78fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e98fa7a6-caab-4984-9762-e03b84ad147a", "content": "", "creation_timestamp": "2026-02-02T12:28:31.523446Z"}, {"uuid": "d00feffb-6972-46ff-bb92-9c93ccdb760c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b30021e-4d23-4ec2-95e7-6fd1a039d016", "content": "", "creation_timestamp": "2026-02-02T12:25:26.980991Z"}, {"uuid": "2eb2d6be-475a-4e6d-9705-3ba6c86591a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e98fa7a6-caab-4984-9762-e03b84ad147a", "content": "", "creation_timestamp": "2026-02-02T12:28:31.523446Z"}, {"uuid": "6bf54e34-d850-47c4-85cd-110035079657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://t.me/arpsyndicate/1493", "content": "#ExploitObserverAlert\n\nCVE-2017-12149\n\nDESCRIPTION: Exploit Observer has 97 entries related to CVE-2017-12149. In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.\n\nFIRST-EPSS: 0.971900000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T14:20:16.000000Z"}, {"uuid": "0f3d6c1b-c1cc-4a6e-961d-e3eab4fbc2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://t.me/arpsyndicate/200", "content": "#ExploitObserverAlert\n\nCVE-2017-12149\n\nDESCRIPTION: Exploit Observer has 93 entries related to CVE-2017-12149. In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.\n\nFIRST-EPSS: 0.971900000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-17T04:37:31.000000Z"}, {"uuid": "7d56fd06-d02a-4a65-818e-c2dd149f858e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://t.me/arpsyndicate/1563", "content": "#ExploitObserverAlert\n\nCVE-2017-12149\n\nDESCRIPTION: Exploit Observer has 95 entries related to CVE-2017-12149. In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.\n\nFIRST-EPSS: 0.971900000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-08T12:55:28.000000Z"}, {"uuid": "bf13f481-e020-486e-8a40-22cd67705e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "published-proof-of-concept", "source": "Telegram/jV3txT6ZcmjSGz1nh42SPt5Og_J4EJFXD4J2ds4Qym4297w", "content": "", "creation_timestamp": "2026-09-19T02:00:04.284791Z"}, {"uuid": "fa81af30-03b2-4b2f-a173-79abdda1e2fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0b0ba54a-a2f0-4571-9507-ddee96d2fcbb", "content": "", "creation_timestamp": "2026-06-23T11:13:26.169387Z"}, {"uuid": "6f34d0e2-a70c-49c3-b765-643c6b21401b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/187700a8-5eb9-4616-a131-fbdf53e2f841", "content": "", "creation_timestamp": "2026-07-01T07:18:00.873902Z"}, {"uuid": "01057a26-f345-499e-822e-e68c3b2b8f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-08)", "content": "", "creation_timestamp": "2026-07-09T10:00:06.336336Z"}, {"uuid": "839fb4d4-a648-4d22-b206-1dd81d3df24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-13)", "content": "", "creation_timestamp": "2026-07-14T10:00:06.933104Z"}, {"uuid": "69f6c70c-824b-477b-bc3f-ace18a200a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "Telegram/X2it7GdOypLpiFxn3cg-I4jvG9se5Wa2yp_zqIfXecEC2Dsy", "content": "", "creation_timestamp": "2026-07-20T16:00:05.015745Z"}, {"uuid": "5d5cf987-0b1e-4dff-a2ee-1f09bd963e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "Telegram/X2it7GdOypLpiFxn3cg-I4jvG9se5Wa2yp_zqIfXecEC2Dsy", "content": "", "creation_timestamp": "2026-07-21T01:00:26.877714Z"}, {"uuid": "af5de4c6-077a-462d-a9a1-653aac6d5b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mswy7rvcrf2u", "content": "", "creation_timestamp": "2026-08-13T06:09:26.181581Z"}, {"uuid": "7e68a12c-6ca2-4b7b-af64-e265c457c4a6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ac143676-ace9-4c12-abb6-6f71184a6855", "content": "", "creation_timestamp": "2026-06-19T12:47:43.277802Z"}, {"uuid": "fe8e4ec4-94d4-4867-81a2-4f294edc2a80", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08cdc64e-7c42-4473-995a-61fe1d17741a", "content": "", "creation_timestamp": "2026-06-23T14:04:51.355270Z"}, {"uuid": "33c45e21-82cd-4062-b8be-166a72c50af8", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-12149", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e26dde7d-f826-46c8-9cf5-f136b866bd1b", "content": "", "creation_timestamp": "2026-06-30T09:42:49.352127Z"}]}