VULNERABILITY INTELLIGENCE

CVE-2001-0312

CVSS score5 MEDIUM
EPSS probability1.53%
CISA KEVNot currently listed
Published2001-06-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.

Primary references