CVE-2002-1639
published 2002-04-01CVE-2002-1639: Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the…
PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
5.33%
91.7th percentile
Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | configurator | — | — |
| oracle | configurator | 11.5.6.0.0 – 11.5.6.16.53 | — |
| oracle | configurator | 11.5.7.0.0 – 11.5.7.17.31 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://securitytracker.com/id?1003967http://www.kb.cert.org/vuls/id/158323http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlhttp://www.securityfocus.com/bid/4433https://exchange.xforce.ibmcloud.com/vulnerabilities/8782http://securitytracker.com/id?1003967http://www.kb.cert.org/vuls/id/158323http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.htmlhttp://www.securityfocus.com/bid/4433https://exchange.xforce.ibmcloud.com/vulnerabilities/8782
2002-04-01
Published