Lucene search
HistoryDec 11, 2000 - 5:00 a.m.
CVE-2000-1025
cve-2000-1025
ewave
servletexec
dos
remote attackers
nvd
vulnerability
software exploit
java servlet engine
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.025 Low
EPSS
Percentile
90.2%
eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the “/servlet/” string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.
Affected configurations
Node
unifyewave_servletexecMatch3.0c
| CPE | Name | Operator | Version |
|---|---|---|---|
| unify:ewave_servletexec | unify ewave servletexec | eq | 3.0c |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7 High
AI Score
Confidence
High
0.025 Low
EPSS
Percentile
90.2%
Related for CVE-2000-1025