← Vulnerability feed

Vulnerability record · CVE-2000-1025 · published 11 December 2000

CVE-2000-1025: Unify ewave servletexec vulnerability

Unify · Ewave Servletexec

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.

5.0 CVSS 2.0 Medium EPSS 8.5% · top 5.2%
5.0CVSS 2.0 base score
8.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servlet/" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=97295224226042&w=2
http://www.securityfocus.com/bid/1868 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5435
http://marc.info/?l=bugtraq&m=97295224226042&w=2
http://www.securityfocus.com/bid/1868 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5435

Track CVE-2000-1025 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2000-1024Unify ewave servletexec vulnerabilityeWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and …EPSS 5.1%7.5CVE-2000-0498Unify ewave servletexec vulnerabilityUnify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper c…EPSS 2.3%5.0CVE-2000-1114Unify ewave servletexec vulnerabilityUnify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+…EPSS 2.9%

Source: NIST National Vulnerability Database (record CVE-2000-1025), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.