{"cves":["CVE-2017-12615","CVE-2017-12617","CVE-2017-7674","CVE-2017-5647"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[0:7.0.76-3]\n- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws\n- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning\n- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision","id":"ELSA-2017-3081","ovalId":"oval:com.oracle.elsa:def:20173081","source":"oracle_linux","title":"ELSA-2017-3081:  tomcat security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2017-3081.html"}