← Vulnerability feed

Vulnerability record · CVE-2000-0498 · published 8 June 2000

CVE-2000-0498: Unify ewave servletexec vulnerability

Unify · Ewave Servletexec

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

7.5 CVSS 3.1 High EPSS 2.3% · top 17.7% CWE-178 · CWE-178
7.5CVSS 3.1 base score, v2 5.0
2.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html Broken LinkVendor Advisory
http://www.securityfocus.com/bid/1328 Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/4649 Third Party AdvisoryVDB Entry
http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html Broken LinkVendor Advisory
http://www.securityfocus.com/bid/1328 Broken LinkThird Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/4649 Third Party AdvisoryVDB Entry

Track CVE-2000-0498 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2000-1024Unify ewave servletexec vulnerabilityeWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and …EPSS 5.1%5.0CVE-2000-1114Unify ewave servletexec vulnerabilityUnify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+…EPSS 2.9%5.0CVE-2000-1025Unify ewave servletexec vulnerabilityeWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains th…EPSS 8.5%9.8CVE-2020-12812FortiOS SSL VPN two-factor authentication bypass via username case changeFortiOS SSL VPN fails to enforce the second authentication factor (FortiToken) when a user alters the letter case of their username. Because the user…KEVEPSS 49%analysed

Source: NIST National Vulnerability Database (record CVE-2000-0498), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.