CVE-2006-0816: Orionserver Orion Application Server

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL.

Affected products

• Orionserver Orion Application Server: up to and including 2.0.6

Published 2006-03-24. Last modified 2026-06-16.