Max CVSS 5.0 Min CVSS 4.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2006-3231 4.3
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
09-10-2019 - 22:50 27-06-2006 - 10:05
CVE-2006-6637 5.0
The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive
14-06-2011 - 04:00 19-12-2006 - 20:28
CVE-2006-7166 5.0
IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."
08-03-2011 - 02:48 20-03-2007 - 10:19
CVE-2006-7165 4.3
IBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP source code and other sensitive information via certain "special URIs."
08-03-2011 - 02:48 20-03-2007 - 10:19
CVE-2005-4833 4.3
IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related
08-03-2011 - 02:29 31-12-2005 - 05:00
CVE-2005-4834 5.0
IBM WebSphere Application Server (WAS) 5.0.2.5 through 5.1.1.3 allows remote attackers to obtain JSP source code and other sensitive information, related to incorrect request processing by the web container.
08-03-2011 - 02:29 31-12-2005 - 05:00
CVE-2006-4223 5.0
IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabl
07-03-2011 - 05:00 18-08-2006 - 20:04
Back to Top Mark selected
Back to Top