Every CVESearch/Get API key

CVE-2000-0063

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary...

5.0 Medium

CVE-2000-0063 is a medium vulnerability (CVSS 5.0) in Nortel Contivity, published January 17, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 72nd percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
1.36%EPSS, 72nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.

Exploit likelihood

1.36%Up 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used5.0

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.

Record
CVE-2000-0063
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE ListNo score

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.

Record
CVE-2000-0063
Updated
2026-11-02
EUVDEUVD-2000-0062No score

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.

Record
EUVD-2000-0062
Updated
2026-11-03
GitHub AdvisoriesGHSA-jq6c-6f3m-2jr3No score

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary...

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script.

Record
GHSA-jq6c-6f3m-2jr3
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open