CVE-2008-2403: Sun Java Asp Server

High severity, CVSS 10.0. EPSS: 19.4% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. (dot dot) in the Path parameter to the MapPath method.

Affected products

• Sun Java Asp Server: up to and including 4.0.2; version 4.0 only; version 4.0.1 only

Published 2008-06-04. Last modified 2026-06-16.