CVE-2002-1578

Published: Apr 15, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.

Affected (1)

Products: Sap: Sap R 3

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Sap R 3	All versions

References (6)

http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/4613

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/8972

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/4613

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/8972

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.