CVE-2000-1238

—

CVSS 2.0

7.5 high

EPSS

—

Published

Dec 31, 2000 (Dec 31, 2000)

Modified

Sep 23, 2026

Description

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.

Vendors: bea
Products: weblogic server
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

NVD CVE.org GitHub PoCs EPSS (—)

In the news0 stories

No ingested article mentions this CVE yet.