Vulnerability in Oracle Application Server
CVE-2002-1632
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
EPSS: 0.054 (91.9th percentile) — read the EPSS interpretation.
Affected products
- Oracle Application_server — versions 1.0.2, 1.0.2.1s, 1.0.2.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, US Government Resource, Patch)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)