Every CVE Search/ Get API key

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a...

5.0 Medium

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.

Exploit likelihood

1.70%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.

Record
CVE-2001-1073
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.

Record
CVE-2001-1073
Updated
2026-11-02
EUVDEUVD-2001-1054 No score

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.

Record
EUVD-2001-1054
Updated
2026-11-03
GitHub AdvisoriesGHSA-fwrv-cc37-24cf No score

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a...

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.

Record
GHSA-fwrv-cc37-24cf
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1073 is a medium vulnerability (CVSS 5.0) in Webridge Px Application Suite, published August 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. No source names a fixed version.

References

MoveEnter Open