CVE-2000-1238 | BDVDB-2026-13145 Detail

Description#

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/5588
http://www.securityfocus.com/bid/5089

Exploit#

No public exploit known

History#

Version 12005-11-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.