UpHeron
All vulnerabilities

Servers and applications

CVE-2005-1112

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the JSP engine.

Severity
Medium 5.0
Published
2 May 2005
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
8.6% in the next 30 daysHigher than 95% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Sources
NVD

Affected software

SoftwareAffected versions
IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server
  • Version 6.0
  • Version 5.1.1.3
  • Version 5.1.1.2
  • Version 5.1.1.1
All 20 release lines
  • Version 5.0
  • Version 5.0.1
  • Version 5.0.2
  • Version 5.0.2.1
  • Version 5.0.2.3
  • Version 5.0.2.4
  • Version 5.0.2.5
  • Version 5.0.2.6
  • Version 5.0.2.7
  • Version 5.0.2.8
  • Version 5.0.2.9
  • Version 5.1.0
  • Version 5.1.0.2
  • Version 5.1.0.4
  • Version 5.1.0.5
  • Version 5.1.1
  • Version 5.1.1.1
  • Version 5.1.1.2
  • Version 5.1.1.3
  • Version 6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2005-1112
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2005-1112