cbcvebase.
CVE-2009-0278
published 2009-01-27

CVE-2009-0278: Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF…

PriorityP424medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.24%
80.8th percentile
Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malformed request.

Affected

2 ranges
VendorProductVersion rangeFixed in
sunjava_system_application_server
sunjava_system_application_server
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.