VULNERABILITY INTELLIGENCE

CVE-2001-0326

CVSS score7.5 HIGH
EPSS probability5.18%
CISA KEVNot currently listed
Published2001-05-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.

Primary references