Skip to content

CVE-2000-0652

IBM WebSphere allows remote attackers to read source code for executable web files by directly...

5.0 MediumPublic exploit

CVE-2000-0652 is a medium vulnerability (CVSS 5.0) in Ibm Websphere Application Server, published July 24, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.98%, the 94th percentile. No source names a fixed version.

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Exploit likelihood

7.98%Up 3.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Record: CVE-2000-0652
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Record: CVE-2000-0652
Updated: 2026-11-02

EUVDEUVD-2000-0648 No score

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Record: EUVD-2000-0648
Updated: 2026-11-03

GitHub AdvisoriesGHSA-78c2-6wr9-gc88 No score

IBM WebSphere allows remote attackers to read source code for executable web files by directly...

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.

Record: GHSA-78c2-6wr9-gc88
Updated: 2026-11-02

Affected products

ibm websphere application server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	IBM Websphere Application Server 2.0./3.0/3.0.2.1 - Showcode	2000-07-24

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References