Description
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Remediation
References
Related Vulnerabilities
WordPress Plugin Flow-Flow Social Stream Unspecified Vulnerability (3.0.71)
WordPress Plugin BuddyPress Customer.io Analytics Integration Cross-Site Request Forgery (1.1.6)
Oracle HTTP Server Other Vulnerability (CVE-2007-0282)
Apache Tomcat Improper Authentication Vulnerability (CVE-2026-34500)
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50097)