2.6

CVE-2004-1877

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Server Version 1.0.2
Oracle ≫ Application Server Version 1.0.2.1s
Oracle ≫ Application Server Version 1.0.2.2
Oracle ≫ Application Server Version 1.0.2.2.2
Oracle ≫ Application Server Version 9.0.2
Oracle ≫ Application Server Version 9.0.2.0.0
Oracle ≫ Application Server Version 9.0.2.0.1
Oracle ≫ Application Server Version 9.0.2.1
Oracle ≫ Application Server Version 9.0.2.2
Oracle ≫ Application Server Version 9.0.2.3
Oracle ≫ Application Server Version 9.0.3
Oracle ≫ Application Server Version 9.0.3.1
Oracle ≫ HTTP Server Version 8.1.7
Oracle ≫ HTTP Server Version 9.0.1
Oracle ≫ HTTP Server Version 9.2.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3% 0.856
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=108067040722235&w=2
http://www.securityfocus.com/bid/10009
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15676