CVE-2000-0500: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 4.6% chance of exploitation in the next 30 days.

The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.

Affected products

• Bea WebLogic Server: version 3.1.8 only; version 4.0 only; version 4.5 only; version 5.1 only

Published 2000-06-21. Last modified 2026-06-16.