CVE-2001-0947: Valicert Enterprise Validation Authority

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

Affected products

• Valicert Enterprise Validation Authority: version 3.3 only; version 3.4 only; version 3.5 only; version 3.6 only; version 3.7 only; version 3.8 only; …

Published 2001-12-04. Last modified 2026-06-16.