Vulnerability

CVE-2002-1990

MEDIUM 5.0

CVE-2002-1990 is a medium-severity vulnerability (CVSS v2 5.0). As of 2026-10-10, 5 hosts in our data show software it affects on an open service in 5 countries.

Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet.

Published
2002-12-31
Last modified
2026-06-16
CVSS score
5.0 CVSS v2
CVSS vector (v2)
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploit likelihood (EPSS)
2.1% in the next 30 days (top 19% of CVEs)

Exposure in our data

5 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Counted 2026-10-10 04:20 UTC

By country

Hong Kong HK1
Indonesia ID1
India IN1
Singapore SG1
United States US1

Affected software seen

resin 2.1.15