7.5
CVE-2004-2478
- EPSS 3.68%
- Published 31.12.2004 05:00:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Data is provided by the National Vulnerability Database (NVD)
Ca ≫ Unicenter Web Services Distributed Management Version <= 3.1
Ibm ≫ Trading Partner Interchange Version <= 4.2.2
Ibm ≫ Trading Partner Interchange Version4.2.1
Jetty ≫ Jetty Http Server Version3.1.6
Jetty ≫ Jetty Http Server Version3.1.7
Jetty ≫ Jetty Http Server Version4.1.0
Jetty ≫ Jetty Http Server Version4.1.0_rc4
Jetty ≫ Jetty Http Server Version4.1.1
Jetty ≫ Jetty Http Server Version4.2.4
Jetty ≫ Jetty Http Server Version4.2.5
Jetty ≫ Jetty Http Server Version4.2.6
Jetty ≫ Jetty Http Server Version4.2.7
Jetty ≫ Jetty Http Server Version4.2.9
Jetty ≫ Jetty Http Server Version4.2.11
Jetty ≫ Jetty Http Server Version4.2.12
Jetty ≫ Jetty Http Server Version4.2.14
Jetty ≫ Jetty Http Server Version4.2.15
Jetty ≫ Jetty Http Server Version4.2.16
Jetty ≫ Jetty Http Server Version4.2.17
Jetty ≫ Jetty Http Server Version4.2.18
Jetty ≫ Jetty Http Server Version4.2.19
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.68% | 0.868 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|