CVE-2002-1858

Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF…

published June 28, 2005

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04534 · 91.5th percentile
Published
2005-06-28T04:00Z
EPSS history
Timeline
  • 28 JUN 04:00Z
    Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF…
    cvelistv5