Patchwire CVEs, their patch status, and feeds to follow them

CVE-2002-1632

No fix known EPSS 5%

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Published 2005-03-26 · CVE record · OSV

Products: oracle application_server