CVE-2002-0561
No fix known EPSS 10%
The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.
Products: oracle application_server, oracle application_server_web_cache, oracle8i, oracle9i