High severity7.5NVD Advisory· Published Jun 8, 2000· Updated Apr 16, 2026
CVE-2000-0499
CVE-2000-0499
Description
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
Affected products
2cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*range: >=3.1.8,<=4.5.1
- cpe:2.3:a:bea:weblogic_server:*:*:express:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/1328nvdBroken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/4694nvdThird Party AdvisoryVDB Entry
- archives.neohapsis.com/archives/ntbugtraq/2000-q2/0262.htmnvdBroken Link
- developer.bea.com/alerts/security_000612.htmlnvdBroken Link
News mentions
0No linked articles in our index yet.