CVE-2005-4833

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

IBM WebSphere Application Server (WAS) 6.0 before 20050201, when serving pages in an Application WAR or an Extended Document Root, allows remote attackers to obtain the JSP source code and other sensitive information via "a specific JSP URL," related to lack of normalization of the URL format.

Affected products

IBM WebSphere Application Server: 6.0

References

http://osvdb.org/34177
http://secunia.com/advisories/24478
http://www-1.ibm.com/support/docview.wss?uid=swg21243541
http://www-1.ibm.com/support/docview.wss?uid=swg24008815
http://www.securityfocus.com/bid/22991
http://www.vupen.com/english/advisories/2007/0970
http://osvdb.org/34177
http://secunia.com/advisories/24478
http://www-1.ibm.com/support/docview.wss?uid=swg21243541
http://www-1.ibm.com/support/docview.wss?uid=swg24008815
http://www.securityfocus.com/bid/22991
http://www.vupen.com/english/advisories/2007/0970

Get alerted when CVE-2005-4833 or the next vulnerability affects your stack