VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 21, 2000· Updated Jun 16, 2026

CVE-2000-0500

CVE-2000-0500

Description

The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Bea/WebLogic Server9 versions
    cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:3.1.8:*:express:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:4.0:*:express:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:4.5:*:express:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*
    • (no CPE)range: =5.1.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.