CVE-2001-0312: IBM WebSphere Plugin

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.

Affected products

• IBM WebSphere Plugin: any version

Published 2001-06-02. Last modified 2026-06-16.