CVE-2004-1877

published 2004-03-30

CVE-2004-1877: The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO…

Priority P4 15 low 2.6 CVSS 2.0

AV N AC H Au N C P I N A N

The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	http_server	—	—
oracle	http_server	—	—
oracle	http_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.