Every CVE Search/ Get API key

CVE-2001-0836

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code...

7.5 HighPublic exploit

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Exploit likelihood

14.7%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record
CVE-2001-0836
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record
CVE-2001-0836
Updated
2026-11-02
EUVDEUVD-2001-0819 No score

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record
EUVD-2001-0819
Updated
2026-11-03
GitHub AdvisoriesGHSA-jff3-2vxf-7gwc No score

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code...

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Record
GHSA-jff3-2vxf-7gwc
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBOracle9iAS Web Cache 2.0 - Remote Buffer Overflow2001-10-18

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0836 is a high vulnerability (CVSS 7.5) in Oracle Application Server Web Cache, published December 6, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.7%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open