4.6

CVE-2002-1637

Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.57% 0.428
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.nextgenss.com/papers/hpoas.pdf
http://www.kb.cert.org/vuls/id/712723
Third Party Advisory
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/968
https://exchange.xforce.ibmcloud.com/vulnerabilities/969
https://exchange.xforce.ibmcloud.com/vulnerabilities/970
https://exchange.xforce.ibmcloud.com/vulnerabilities/971
https://exchange.xforce.ibmcloud.com/vulnerabilities/972