{"id":"CVE-2001-1510","aliases":["EUVD-2001-1487","GHSA-75pq-cv68-5rxq"],"status":"published","title":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS...","description":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02538,"percentile":0.85071,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2001-12-31T05:00:00Z","modified":"2026-06-16T21:56:24Z","products":[{"vendor":"macromedia","product":"jrun"}],"references":[{"url":"http://www.iss.net/security_center/static/7623.php","tags":["vdb-entry","x_refsource_XF","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/3592","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/243636","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://online.securityfocus.com/archive/1/243203","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22262\u0026Method=Full","tags":["vendor-advisory","x_refsource_ALLAIRE","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1510"},{"url":"https://github.com/advisories/GHSA-75pq-cv68-5rxq"}],"sources":{"cve":[{"id":"CVE-2001-1510","description":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL.","status":"published","published":"2005-07-14T04:00:00Z","modified":"2024-09-16T17:48:06.106Z","updated_at":"2026-11-02T14:34:42.680977Z"}],"euvd":[{"id":"EUVD-2001-1487","description":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL.","status":"published","published":"2005-07-14T04:00:00Z","modified":"2024-09-16T17:48:06Z","updated_at":"2026-11-03T00:55:38.742114Z"}],"ghsa":[{"id":"GHSA-75pq-cv68-5rxq","title":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS...","description":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL.","status":"published","published":"2022-04-30T18:18:11Z","modified":"2023-01-30T05:05:54Z","updated_at":"2026-11-02T14:47:22.488805Z"}],"nvd":[{"id":"CVE-2001-1510","description":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL.","status":"published","published":"2001-12-31T05:00:00Z","modified":"2026-06-16T21:56:24.45Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:41.313877Z"}]}}