How severe is CVE-2004-0281?

CVE-2004-0281 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2004-0281 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2004-0281?

CVE-2004-0281 affects Caucho Resin. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2004-0281?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2004-0281 published?

CVE-2004-0281 was published on 2004-11-23 and last updated on 2026-06-16.

CVE-2004-0281

CVE-2004-0281 is a medium-severity vulnerability in Caucho Resin with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 4% (90th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Caucho Resin
Published: 2004-11-23
Last modified: 2026-06-16

Description

Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.

Frequently asked questions

What is CVE-2004-0281?: Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
How severe is CVE-2004-0281?: CVE-2004-0281 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2004-0281 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2004-0281?: CVE-2004-0281 affects Caucho Resin. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2004-0281?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2004-0281 published?: CVE-2004-0281 was published on 2004-11-23 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:caucho:resin:2.1.12:*:*:*:*:*:*:*

More vulnerabilities in Caucho Resin

CVE-2021-44138 — High (CVSS 7.5): There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows…
CVE-2012-2967 — High (CVSS 7.5): Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign)…
CVE-2012-2966 — High (CVSS 7.5): Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis…
CVE-2012-2965 — High (CVSS 7.5): Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of…
CVE-2012-2969 — Medium (CVSS 6.4): Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on…
CVE-2014-2966 — Medium (CVSS 5.0): The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows…

All CVEs affecting Caucho Resin →