CVE-2000-0652: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Affected products

• IBM WebSphere Application Server: version 2.0 only; version 3.0 only; version 3.0.21 only

Published 2000-07-24. Last modified 2026-06-16.