{"id":"CVE-2006-3231","aliases":["EUVD-2006-3228","GHSA-hhmc-pjhr-jvpx"],"status":"published","title":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when...","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02123,"percentile":0.82024,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-06-27T10:00:00Z","modified":"2026-06-16T22:26:40Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://secunia.com/advisories/20732","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=180\u0026uid=swg27006876","tags":["vendor-advisory","x_refsource_AIXAPAR","x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0970","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/24478","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/2482","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21243541","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18578","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22991","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3231"},{"url":"https://github.com/advisories/GHSA-hhmc-pjhr-jvpx"}],"sources":{"cve":[{"id":"CVE-2006-3231","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","status":"published","published":"2006-06-27T10:00:00Z","modified":"2024-08-07T18:23:20.995Z","updated_at":"2026-11-02T14:33:50.024504Z"}],"euvd":[{"id":"EUVD-2006-3228","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","status":"published","published":"2006-06-27T10:00:00Z","modified":"2024-08-07T18:23:20Z","updated_at":"2026-11-03T01:15:57.220997Z"}],"ghsa":[{"id":"GHSA-hhmc-pjhr-jvpx","title":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when...","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","status":"published","published":"2022-05-01T07:07:07Z","modified":"2023-01-31T05:01:30Z","updated_at":"2026-11-02T14:48:04.351357Z"}],"nvd":[{"id":"CVE-2006-3231","description":"Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via \"URIs with special characters.\"","status":"published","published":"2006-06-27T10:05:00Z","modified":"2026-06-16T22:26:40.21Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:04.288594Z"}]}}