CVE-2002-1394

HIGH · CVSS 7.5 EPSS 5.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-01-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2002-1394

Severity

HIGH

CVSS

7.5

EPSS

5.25%

Apache

Original Filing — NVD Description

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.