CVE-2000-0683: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet.

Affected products

• Bea WebLogic Server: version 5.1 only

Published 2000-10-20. Last modified 2026-06-16.