← Back
CWE-178

85 CVEs • Abstraction: Base

Improper Handling of Case Sensitivity

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

JSON object

Loading...

CVEs (85)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2001-1238
1Microsoft
1Windows 2000
Apr 16, 2026
Jul 16, 2001
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users t...Show more
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.Show less
CVE-2000-0499
1Bea
1Weblogic Server
Apr 16, 2026
Jun 8, 2000
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-2000-0498
1Unify
1Ewave Servletexec
Apr 16, 2026
Jun 8, 2000
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-2000-0497
1Ibm
1Websphere Application Server
Apr 16, 2026
Jun 8, 2000
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
CVE-1999-0239
1Netscape
1Fasttrack Server
Apr 16, 2026
Jan 1, 1998
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.