CVE-2001-1372

Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP…

published April 2, 2003

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06483 · 93.7th percentile
Published
2003-04-02T05:00Z
EPSS history
Timeline
  • 02 APR 05:00Z
    Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP…
    cvelistv5