CVE-2002-0563

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including…

published June 11, 2002

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
51%
Percentile
98.9
In the wild
Unconfirmed
What it is

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51129 · 98.9th percentile
Published
2002-06-11T04:00Z
EPSS history
Timeline
  • 11 JUN 04:00Z
    The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including…
    cvelistv5