VULNERABILITY INTELLIGENCE

CVE-2000-1025

CVSS score5 MEDIUM
EPSS probability8.49%
CISA KEVNot currently listed
Published2000-12-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.

Primary references