Vulnerability Details CVE-2005-0425
Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL that causes the page to be processed by the file serving servlet instead of the JSP engine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 56.9%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2005-0425
-
cpe:2.3:a:ibm:websphere_application_server:5.0
-
cpe:2.3:a:ibm:websphere_application_server:5.1.0
-
cpe:2.3:a:ibm:websphere_application_server:6.0