CVE-2001-0917: Apache Tomcat

Medium severity, CVSS 5.0. EPSS: 8.2% chance of exploitation in the next 30 days.

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

Affected products

• Apache Tomcat: version 4.0.1 only

Published 2001-11-22. Last modified 2026-06-16.