AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-6637

MEDIUM · CVSS 5 EPSS 2.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-12-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2006-6637
Severity
MEDIUM
CVSS
5
EPSS
2.64%

Original NVD Description

The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."