What’s Vulnerable › Vulnerabilities

CVE-2000-0683

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2000-10-20 · updated 2026-06-16

Description

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.

Affected products

• Bea Weblogic Server: 5.1, 5.1-sp1, 5.1-sp10, 5.1-sp11, 5.1-sp12, 5.1-sp2 (+7)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html
• http://developer.bea.com/alerts/security_000728.html
• http://www.osvdb.org/1480
• http://www.securityfocus.com/bid/1517
• http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html
• http://developer.bea.com/alerts/security_000728.html
• http://www.osvdb.org/1480
• http://www.securityfocus.com/bid/1517

Get alerted when CVE-2000-0683 or the next vulnerability affects your stack