CVE Vulnerabilities

CVE-2000-0684

Published: Oct 20, 2000 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.

Affected Software

Name Vendor Start Version End Version
Weblogic_server Bea 3.1.8 3.1.8
Weblogic_server Bea 4.0.4 4.0.4
Weblogic_server Bea 4.5.1 4.5.1

References