CVE-2000-1114
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP...
CVE-2000-1114 is a medium vulnerability (CVSS 5.0) in Unify Ewave Servletexec, published December 19, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. No source names a fixed version.
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
Exploit likelihood
What each source reports
NVD Score used
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
- Record
CVE-2000-1114- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
- Record
CVE-2000-1114- Updated
- 2026-11-02
EUVDEUVD-2000-1099 No score
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
- Record
EUVD-2000-1099- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fcmp-4fvx-mvrf No score
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP...
Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".
- Record
GHSA-fcmp-4fvx-mvrf- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Unify eWave ServletExec 3 - .JSP Source Disclosure | 2000-11-21 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |