{"id":"CVE-2006-1093","aliases":["EUVD-2006-1097","GHSA-j99c-cwf3-rrxm"],"status":"published","title":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9...","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01351,"percentile":0.71717,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-03-09T11:00:00Z","modified":"2026-06-16T22:22:00Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://securitytracker.com/id?1015716","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16908","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/0788","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21231377","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1093"},{"url":"https://github.com/advisories/GHSA-j99c-cwf3-rrxm"}],"sources":{"cve":[{"id":"CVE-2006-1093","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","status":"published","published":"2006-03-09T11:00:00Z","modified":"2024-08-07T16:56:15.574Z","updated_at":"2026-11-02T14:33:51.835276Z"}],"euvd":[{"id":"EUVD-2006-1097","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","status":"published","published":"2006-03-09T11:00:00Z","modified":"2024-08-07T16:56:15Z","updated_at":"2026-11-03T01:16:06.740697Z"}],"ghsa":[{"id":"GHSA-j99c-cwf3-rrxm","title":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9...","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","status":"published","published":"2022-05-01T06:46:00Z","modified":"2023-01-31T05:00:44Z","updated_at":"2026-11-02T14:47:55.156502Z"}],"nvd":[{"id":"CVE-2006-1093","description":"Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.","status":"published","published":"2006-03-09T13:06:00Z","modified":"2026-06-16T22:22:00.537Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:00.920802Z"}]}}