CVE-2000-0500

Published: Jun 21, 2000Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.

Affected (8)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 3.1.8
Bea Weblogic Server	Version 3.1.8
Bea Weblogic Server	Version 4.0
Bea Weblogic Server	Version 4.0
Bea Weblogic Server	Version 4.5
Bea Weblogic Server	Version 4.5
Bea Weblogic Server	Version 5.1
Bea Weblogic Server	Version 5.1