CVE-2000-0682 — Weblogic Server vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.6%
top 30.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedOct 20
Latest updateApr 30

Description

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: archives.neohapsis.com ↗Patch: www.securityfocus.com ↗Patch: archives.neohapsis.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c47f-j86j-3p94: BEA WebLogic 5↗2022-04-30
▶
CVEList
CVE-2000-0682: BEA WebLogic 5↗2000-10-13
▶

📄Research Papers

1
arXiv
Encoding a Taxonomy of Web Attacks with Different-Length Vectors↗2002-10-29
▶
CVE-2000-0682 — BEA Weblogic Server vulnerability | cvebase