VULNERABILITY INTELLIGENCE

CVE-2006-3231

CVSS score4.3 MEDIUM
EPSS probability2.12%
CISA KEVNot currently listed
Published2006-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."

Primary references