Vulnerability in Oracle Configurator

CVE-2002-1639

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".

EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.

Affected products

Oracle Configurator — versions 11i
N/a — versions n/a

References

cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)