6.4 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.2%
Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a βretrieveβ action with a location parameter of . (dot).
www.atstake.com/research/advisories/2003/a091503-1.txt