5

CVE-2002-0562

EPSS 2.92%
Published 03.07.2002 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Application Server Version1.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.0

Oracle ≫ Application Server Web Cache Version2.0.0.1

Oracle ≫ Application Server Web Cache Version2.0.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.3

Oracle ≫ Oracle9i Version9.0

Oracle ≫ Oracle9i Version9.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.92%	0.856

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://www.cert.org/advisories/CA-2002-08.html

Patch

Third Party Advisory

US Government Resource

http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf

Patch

Vendor Advisory

http://marc.info/?l=bugtraq&m=101301440005580&w=2

http://www.kb.cert.org/vuls/id/698467

US Government Resource

http://www.securityfocus.com/bid/4034

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2002-0562

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0562

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0562

EUVD