← Database

CVE-2001-1371

HIGH CVSS: 7.5 Published: 2002-02-06 Modified: 2026-06-16

Description

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.

Affected Platforms

Oracle Application Server

Weakness Type

CWE-264, NVD-CWE-noinfo

References