← Database

CVE-2002-1632

MEDIUM CVSS: 6.4 Published: 2002-12-31 Modified: 2026-06-16

Description

Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.

Affected Platforms

Oracle Application Server

Weakness Type

NVD-CWE-Other

References