Lucene search

K
cvelistMitreCVELIST:CVE-2009-2445
HistoryJul 13, 2009 - 5:00 p.m.

CVE-2009-2445

2009-07-1317:00:00
mitre
www.cve.org
4

AI Score

6.4

Confidence

Low

EPSS

0.199

Percentile

96.4%

Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.

AI Score

6.4

Confidence

Low

EPSS

0.199

Percentile

96.4%

Related for CVELIST:CVE-2009-2445