CVEvulnerability

CVE-2000-0685

10.0 HIGH Published 2000-10-20 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2000-10-20
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.

Affected configurations

• bea weblogic server 3.1.8 • bea weblogic server 4.0.4 • bea weblogic server 4.5.1

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html Patch, Vendor Advisory
http://developer.bea.com/alerts/security_000731.html developer.bea.com
http://www.securityfocus.com/bid/1525 Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html Patch, Vendor Advisory
http://developer.bea.com/alerts/security_000731.html developer.bea.com
http://www.securityfocus.com/bid/1525 Exploit, Patch, Vendor Advisory