Lucene search
HistoryDec 31, 2000 - 5:00 a.m.
CVE-2000-1238
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.9%
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
Affected configurations
Node
beaweblogic_serverMatch5.1
ORbeaweblogic_serverMatch5.1express
ORbeaweblogic_serverMatch5.1sp1
ORbeaweblogic_serverMatch5.1sp1express
ORbeaweblogic_serverMatch5.1sp2
ORbeaweblogic_serverMatch5.1sp2express
ORbeaweblogic_serverMatch5.1sp3
ORbeaweblogic_serverMatch5.1sp3express
ORbeaweblogic_serverMatch5.1sp4
ORbeaweblogic_serverMatch5.1sp4express
ORbeaweblogic_serverMatch5.1sp5
ORbeaweblogic_serverMatch5.1sp5express
ORbeaweblogic_serverMatch5.1sp6
ORbeaweblogic_serverMatch5.1sp6express
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.005
Percentile
76.9%
Related for NVD:CVE-2000-1238