CVE-2000-0759: Apache Tomcat

Medium severity, CVSS 6.4. EPSS: 25.7% chance of exploitation in the next 30 days.

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.

Affected products

• Apache Tomcat: version 3.1 only

Published 2000-10-20. Last modified 2026-06-16.