cbcvebase.
CVE-2001-0126
published 2001-03-12

CVE-2001-0126: Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the…

PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
4.03%
89.5th percentile
Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

Affected

1 ranges
VendorProductVersion rangeFixed in
oracleoracle8i
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.