Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8ezk-dvv2-3qba
Vulnerability ID VCID-8ezk-dvv2-3qba
Aliases CVE-2000-0672
Summary The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
epss 0.03158 https://api.first.org/data/v1/epss?cve=CVE-2000-0672
apache_tomcat Important https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0672
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2000-0672
Reference id Reference type URL
http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html
https://api.first.org/data/v1/epss?cve=CVE-2000-0672
https://exchange.xforce.ibmcloud.com/vulnerabilities/5160
http://www.securityfocus.com/bid/1548
cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*
CVE-2000-0672 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0672
CVE-2000-0672 https://nvd.nist.gov/vuln/detail/CVE-2000-0672
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2000-0672
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.86855
EPSS Score 0.03158
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:38:21.298101+00:00 Apache Tomcat Importer Import https://tomcat.apache.org/security-3.html 38.0.0