CVE-2003-0411: Oracle Sun One Application Server

High severity, CVSS 7.5. EPSS: 25.1% chance of exploitation in the next 30 days.

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension.

Affected products

• Oracle Sun One Application Server: version 7.0 only

Published 2003-06-30. Last modified 2026-06-16.