Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-3n3t-ygrc-wug2
Vulnerability ID VCID-3n3t-ygrc-wug2
Aliases CVE-2000-0759
GHSA-qg4g-6jcq-rw93
Summary Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
System Score Found at
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
epss 0.39817 https://api.first.org/data/v1/epss?cve=CVE-2000-0759
apache_tomcat Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-qg4g-6jcq-rw93
cvssv2 6.4 https://nvd.nist.gov/vuln/detail/CVE-2000-0759
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2000-0759
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2000-0759
http://www.iss.net/security_center/static/4967.php
http://www.securityfocus.com/bid/1531
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org
cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*
CVE-2000-0759 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0759
CVE-2000-0759 https://nvd.nist.gov/vuln/detail/CVE-2000-0759
CVE-2000-0759;OSVDB-674 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/20131.txt
CVE-2000-0759;OSVDB-674 Exploit https://www.securityfocus.com/bid/1531/info
GHSA-qg4g-6jcq-rw93 https://github.com/advisories/GHSA-qg4g-6jcq-rw93
Data source Exploit-DB
Date added July 20, 2000
Description Apache Tomcat 3.1 - Path Revealing
Ransomware campaign use Known
Source publication date July 20, 2000
Exploit type remote
Platform multiple
Source update date July 31, 2012
Source URL https://www.securityfocus.com/bid/1531/info
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2000-0759
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.97299
EPSS Score 0.39817
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:38:21.274216+00:00 Apache Tomcat Importer Import https://tomcat.apache.org/security-3.html 38.0.0