CVE-2002-1632

published 2002-12-31

CVE-2002-1632: Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information…

medium 6.4 CVSS 3.1

AV N AC L Au N C P I P A N

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—