Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2001-0326

Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.

  • Published: May 3, 2001
  • Updated: Apr 13, 2023
  • CVE: CVE-2001-0326
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
oracle / application_server release_1.0.2.0.1 release_1.0.2.0.1.x
oracle / oracle8i 8.1.7_r3 8.1.7_r3.x