AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2000-1238

HIGH · CVSS 7.5 EPSS 2.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2000-1238
Severity
HIGH
CVSS
7.5
EPSS
2.73%

Original NVD Description

BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.