CVE-2006-3835
apache tomcat: no CVSS score yet. EPSS 48% chance of exploitation in the next 30 days. Fixed in org.apache.tomcat:tomcat 5.5.17.
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.
- EPSS
- 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:tomcat
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wfj7-mhr5-pcwq | Maven | org.apache.tomcat:tomcat | >=5.0.0 <5.5.17 | 5.5.17 |