CVE-2001-0446: IBM WebSphere Commerce Suite

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.

Affected products

• IBM WebSphere Commerce Suite: version 4.0.1 only

Published 2001-06-18. Last modified 2026-06-16.