CVE-2006-6637
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-6637
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM WebSphere应用服务器源码泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 Websphere应用服务器在特定配置情况下处理用户请求存在问题，远程攻击者可能利用此漏洞获取JSP源码。 如果WebSphere应用服务器被配置为以下情况之一的话： 1 从Application WAR生成JSP；ibm.web.ext.xm文件中fileServingEnabled设置为true，可以访问war目录下的JSP文件 2 从Exten
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-6637
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-6637
Please Login to view more intelligence information
- http://www-1.ibm.com/support/docview.wss?uid=swg21243541x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-6637
Same Patch Batch · n/a · 2006-12-19 · 8 CVEs total
| CVE-2006-6636 | IBM WebSphere 未明安全漏洞 | |
| CVE-2006-6638 | IBM DB2远程SQLJRA包拒绝服务漏洞 | |
| CVE-2006-6639 | Chetcpasswd 多个未明安全漏洞 | |
| CVE-2006-6640 | Omniture SiteCatalyst多个跨站脚本攻击漏洞 | |
| CVE-2006-3896 | NeoScale Systems CryptoStor Tape 700 Series Appliance SmartCard认证绕过漏洞 | |
| CVE-2006-6106 | Linux Kernel蓝牙CAPI报文远程溢出漏洞 | |
| CVE-2006-6605 | MailEnable POP服务PASS命令远程栈溢出漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_ - CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo
V. Comments for CVE-2006-6637
No comments yet