Skip to content

CVE-2002-0569

Oracle 9i Application Server allows remote attackers to bypass access restrictions for...

7.5 High

CVE-2002-0569 is a high vulnerability (CVSS 7.5) in Oracle Application Server, published July 3, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.9%, the 97th percentile. No source names a fixed version.

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Exploit likelihood

18.9%Up 17.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record: CVE-2002-0569
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record: CVE-2002-0569
Updated: 2026-11-02

EUVDEUVD-2002-0564 No score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record: EUVD-2002-0564
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g3xm-75qj-2vf8 No score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for...

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record: GHSA-g3xm-75qj-2vf8
Updated: 2026-11-02

Affected products

oracle application server

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References