CVE-2000-0685

Published: Oct 20, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.

Affected (3)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 3.1.8
Bea Weblogic Server	Version 4.0.4
Bea Weblogic Server	Version 4.5.1

References (6)

http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html

Source: cve@mitre.org

PatchVendor Advisory

http://developer.bea.com/alerts/security_000731.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/1525

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://developer.bea.com/alerts/security_000731.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1525

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

Timeline

No history available yet.