CVE-2017-2594

MEDIUM · CVSS 5.4 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-2594

Severity

MEDIUM

CVSS

5.4

EPSS

1.96%

Original NVD Description

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.