10.0crit
CVE-2000-0684in critical feed1 exploit
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.3%
percentile 96%
Public exploits
1
Exploit-DB
Summary
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
Exploit prediction (EPSS)
12.26% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
Exploits and detections
- EDB-20081 NetZero ZeroPort 3.0 - Weak Encryption Method · local · 2000-07-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- developer.bea.com /alerts/security_000731.html · x_refsource_CONFIRM, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-07/0434.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/1525 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2000-0684
- NVD: CVE-2000-0684
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.