5

CVE-2002-0562

EPSS 3.64%
Veröffentlicht 03.07.2002 04:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Application Server Version1.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.0

Oracle ≫ Application Server Web Cache Version2.0.0.1

Oracle ≫ Application Server Web Cache Version2.0.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.3

Oracle ≫ Oracle9i Version9.0

Oracle ≫ Oracle9i Version9.0.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.64%	0.875

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.cert.org/advisories/CA-2002-08.html

Patch

Third Party Advisory

US Government Resource

http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf

Patch

Vendor Advisory

http://marc.info/?l=bugtraq&m=101301440005580&w=2

http://www.kb.cert.org/vuls/id/698467

US Government Resource

http://www.securityfocus.com/bid/4034

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2002-0562

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0562

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0562

EUVD