Lucene search
HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0684
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.01
Percentile
84.0%
BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
Affected configurations
Node
beaweblogic_serverMatch3.1.8
ORbeaweblogic_serverMatch4.0.4
ORbeaweblogic_serverMatch4.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bea | weblogic_server | 3.1.8 | cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:* |
| bea | weblogic_server | 4.0.4 | cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:* |
| bea | weblogic_server | 4.5.1 | cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2000-0684
2000-10-13 04:00:00
cve
cve
CVE-2000-0684
2000-10-20 04:00:00
exploitdb
exploitdb
NetZero ZeroPort 3.0 - Weak Encryption Method
2000-07-18 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.01
Percentile
84.0%
Related for NVD:CVE-2000-0684