CVE:CVE-2000-0682
CNNVD:CNNVD-200010-032
BEA WebLogic 5.1.x存在漏洞。远程攻击者可以通过调用FileServlet的URL插入/ConsoleHelp/读取解析页面的源代码。
solution:Upgrade bea weblogic_server to a higher version than 5.1,5.1:sp1,5.1:sp10,5.1:sp11,5.1:sp12,5.1:sp2,5.1:sp3,5.1:sp4,5.1:sp5,5.1:sp6,5.1:sp7,5.1:sp8,5.1:sp9,and avoid the version 5.1,5.1:sp1,5.1:sp10,5.1:sp11,5.1:sp12,5.1:sp2,5.1:sp3,5.1:sp4,5.1:sp5,5.1:sp6,5.1:sp7,5.1:sp8,5.1:sp9