Unrated severityNVD Advisory· Published Jun 21, 2000· Updated Apr 16, 2026
CVE-2000-0500
CVE-2000-0500
Description
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
Affected products
8cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:3.1.8:*:express:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:4.0:*:express:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:4.5:*:express:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/1378nvdExploitPatchVendor Advisory
- marc.infonvd
- www.weblogic.com/docs51/admindocs/http.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/4775nvd
News mentions
0No linked articles in our index yet.