Unify Ewave Servletexec — known CVE vulnerabilities

Every CVE whose affected-product data names Unify Ewave Servletexec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2000-1024 — CVSS 10.0 (critical): eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload…
• CVE-2000-0498 — CVSS 7.5 (high): Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension…
• CVE-2000-1025 — CVSS 5.0 (medium): eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that…
• CVE-2000-1114 — CVSS 5.0 (medium): Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as…