Oracle Application Server Other Vulnerability (CVE-2002-0561)

Description

The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.

Remediation

References

CVE-2002-0561

Related Vulnerabilities

WordPress Plugin Shopping Cart & eCommerce Store Cross-Site Request Forgery (5.1.0)

Lighttpd Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4727)

Django Improper Access Control Vulnerability (CVE-2016-2048)

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0508)

Java Denial of Service (DoS) Vulnerability (CVE-2018-3180)

Severity

High

Classification