For the LF response- that's widely found. For the upper cutoff - to be honest, I relied on some old memories. Unfortunately the probe and 'scope manuals are written seemingly separately and (at least the ones I've found) don't clearly say whether the bandwidth or risetime are system or (presumably calculated) separate bandwidths. So I took a 200MHz 'scope and a 100MHz probe and a PG506 fast-rise generator (that's what was convenient) - and what I found was a mostly clean pulse with a direct input, and _spiked_ with the probe. One can easily imagine how an attenuator can be designed to have such a behavior, so it's hardly staggering.
Does someone have a contrary measurement or clearly written spec?