CVE-2002-1639

Опубликовано: 01 апр. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".

Ссылки

http://securitytracker.com/id?1003967
Patch
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/158323
Patch
Third Party Advisory
US Government Resource
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html
Patch
http://www.securityfocus.com/bid/4433
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8782
VDB Entry
http://securitytracker.com/id?1003967
Patch
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/158323
Patch
Third Party Advisory
US Government Resource
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html
Patch
http://www.securityfocus.com/bid/4433
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/8782
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*

Версия от 11.5.6.0.0 (включая) до 11.5.6.16.53 (включая)

cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*

Версия от 11.5.7.0.0 (включая) до 11.5.7.17.31 (включая)

cpe:2.3:a:oracle:configurator:11i:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02093

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mqr3-hx46-j2rf

github

почти 4 года назад