CVE-2005-2006
jboss jboss: no CVSS score yet. EPSS 9.3% chance of exploitation in the next 30 days.
JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file.
- EPSS
- 9.3% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jboss:jboss