| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 1.0.2 | |
| jsp | ≤ 1.1.1 |
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free