Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-1632
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.1%
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Affected configurations
Node
oracleapplication_serverMatch1.0.2
ORoracleapplication_serverMatch1.0.2.1s
ORoracleapplication_serverMatch1.0.2.2
ORoracleapplication_serverMatch9.0.2.0.0
ORoracleapplication_serverMatch9.0.2.0.1
Related
cve
cve
CVE-2002-1632
2005-03-26 05:00:00
cvelist
cvelist
CVE-2002-1632
2005-03-26 05:00:00
openvas
openvas
Oracle XSQL Sample Application Vulnerability
2005-11-03 00:00:00
Oracle XSQL Sample Application Vulnerability
2005-11-03 00:00:00
nessus
nessus
Oracle Application Server Multiple Vulnerabilities
2012-01-24 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.1%
Related for NVD:CVE-2002-1632