CVE-2002-0562

Published: Jul 3, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

Affected (7)

Products: Oracle: Application Server, Application Server Web Cache, Oracle9i

Oracle

3 products

Application Server

Application Server Web Cache

Oracle9i

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Oracle Application Server	Version 1.0.2
Oracle Application Server Web Cache	Version 2.0.0.0
Oracle Application Server Web Cache	Version 2.0.0.1
Oracle Application Server Web Cache	Version 2.0.0.2
Oracle Application Server Web Cache	Version 2.0.0.3
Oracle Oracle9i	Version 9.0.1
Oracle Oracle9i	Version 9.0