10.0crit
CVE-2000-0685in critical feed1 exploit
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute J…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.3%
percentile 96%
Public exploits
1
Exploit-DB
Summary
BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
Exploit prediction (EPSS)
12.26% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
Exploits and detections
- EDB-20125 Weblogic 3.1.8/4.0.4/4.5.1 - Remote Command Execution · remote · 2000-08-01
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- developer.bea.com /alerts/security_000731.html · x_refsource_CONFIRM, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-07/0434.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/1525 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2000-0685
- NVD: CVE-2000-0685
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.