← Vulnerability feed

Vulnerability record · CVE-2000-1024 · published 11 December 2000

CVE-2000-1024: Unify ewave servletexec vulnerability

Unify · Ewave Servletexec

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.

10.0 CVSS 2.0 High EPSS 5.1% · top 7.9%
10.0CVSS 2.0 base score
5.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
23 Sep 2026Last modified by NVD

Description

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=97306581513537&w=2
http://www.securityfocus.com/bid/1876 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5450
http://marc.info/?l=bugtraq&m=97306581513537&w=2
http://www.securityfocus.com/bid/1876 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5450

Track CVE-2000-1024 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2000-0498Unify ewave servletexec vulnerabilityUnify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper c…EPSS 2.3%5.0CVE-2000-1114Unify ewave servletexec vulnerabilityUnify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+…EPSS 2.9%5.0CVE-2000-1025Unify ewave servletexec vulnerabilityeWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains th…EPSS 8.5%

Source: NIST National Vulnerability Database (record CVE-2000-1024), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.