CVE-2000-0685: Bea WebLogic Server

High severity, CVSS 10.0. EPSS: 12.3% chance of exploitation in the next 30 days.

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.

Affected products

• Bea WebLogic Server: version 3.1.8 only; version 4.0.4 only; version 4.5.1 only

Published 2000-10-20. Last modified 2026-06-16.