5

CVE-2002-0562

EPSS 2.92%
Veröffentlicht 03.07.2002 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Application Server Version1.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.0

Oracle ≫ Application Server Web Cache Version2.0.0.1

Oracle ≫ Application Server Web Cache Version2.0.0.2

Oracle ≫ Application Server Web Cache Version2.0.0.3

Oracle ≫ Oracle9i Version9.0

Oracle ≫ Oracle9i Version9.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.92%	0.856

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://www.cert.org/advisories/CA-2002-08.html

Patch

Third Party Advisory

US Government Resource

http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf

Patch

Vendor Advisory

http://marc.info/?l=bugtraq&m=101301440005580&w=2

http://www.kb.cert.org/vuls/id/698467

US Government Resource

http://www.securityfocus.com/bid/4034

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2002-0562

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0562

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0562

EUVD