Unrated severityNVD Advisory· Published Mar 20, 2007· Updated Jun 16, 2026
CVE-2006-7166
CVE-2006-7166
Description
IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."
Affected products
35cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*+ 34 more
- cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.14:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.15:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.16:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.0.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:5.1.1.9:*:*:*:*:*:*:*
- (no CPE)range: <=5.1.1.9
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/24478nvdPatchVendor Advisory
- www-1.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www-1.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/22991nvd
- www.vupen.com/english/advisories/2007/0970nvd
News mentions
0No linked articles in our index yet.