BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2000-10-13T04:00:00

Updated: 2024-08-08T05:28:41.059Z

Reserved: 2000-09-19T00:00:00

Link: CVE-2000-0684

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2000-10-20T04:00:00.000

Modified: 2024-11-20T23:33:03.613

Link: CVE-2000-0684

cve-icon Redhat

No data.