Lucene search

K
nvd[email protected]NVD:CVE-2000-1238
HistoryDec 31, 2000 - 5:00 a.m.

CVE-2000-1238

2000-12-3105:00:00
web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.9%

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.

Affected configurations

NVD
Node
beaweblogic_serverMatch5.1
OR
beaweblogic_serverMatch5.1express
OR
beaweblogic_serverMatch5.1sp1
OR
beaweblogic_serverMatch5.1sp1express
OR
beaweblogic_serverMatch5.1sp2
OR
beaweblogic_serverMatch5.1sp2express
OR
beaweblogic_serverMatch5.1sp3
OR
beaweblogic_serverMatch5.1sp3express
OR
beaweblogic_serverMatch5.1sp4
OR
beaweblogic_serverMatch5.1sp4express
OR
beaweblogic_serverMatch5.1sp5
OR
beaweblogic_serverMatch5.1sp5express
OR
beaweblogic_serverMatch5.1sp6
OR
beaweblogic_serverMatch5.1sp6express

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.005

Percentile

76.9%

Related for NVD:CVE-2000-1238