VULNERABILITY INTELLIGENCE

CVE-2001-1510

CVSS score5 MEDIUM
EPSS probability2.54%
CISA KEVNot currently listed
Published2001-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.

Primary references