CVE-2001-0917

medium

Apache

CVSS v3 Base Score

5.0

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Score

3.4%

Exploitation probability in 30 days

Top 13% most likely to be exploited

Attack Characteristics

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Published: November 22, 2001 (8939 days ago)

Last Modified: April 16, 2026

Vendor: Apache

Source: NVD

Description

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

NVD-CWE-Other

apache tomcat