exploitDog

CVE-2000-1114

Опубликовано: 09 янв. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1970
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/1970
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:unify:ewave_servletexec:3.0:*:*:*:*:*:*:*

cpe:2.3:a:unify:ewave_servletexec:3.0c:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03815

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fcmp-4fvx-mvrf

github

больше 3 лет назад

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".

EPSS

Процентиль: 88%

0.03815

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other