CVE-2000-0685

critical

Description

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.

References

http://developer.bea.com/alerts/security_000731.html

http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html

Details

Source: Mitre, NVD

Published: 2000-10-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H