AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2005-1754

MEDIUM · CVSS 5 EPSS 2.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2005-1754
Severity
MEDIUM
CVSS
5
EPSS
2.84%
Apache Java

Original Filing — NVD Description

JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.