Back
CVE-2001-1510
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows…
Medium5.0EPSS 2.5%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
- EPSS (exploitation in 30 days)
- 2.5% · top 15% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (6)
- allaire-jrun-view-directory(7623) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 3592 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20011203 Allaire JRun ACL bypassing/soure disclosure vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20011129 RE: def-2001-32 - Allaire JRun directory browsing vulnerability (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20011128 def-2001-32 (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- MPSB01-13 (opens in a new tab)vendor-advisoryx_refsource_ALLAIREx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2001-1510)Record last updated .