Every CVESearch/Get API key

CVE-2002-0569

Oracle 9i Application Server allows remote attackers to bypass access restrictions for...

7.5 High

CVE-2002-0569 is a high vulnerability (CVSS 7.5) in Oracle Application Server, published July 3, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.9%, the 97th percentile. No source names a fixed version.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
18.9%EPSS, 97th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Exploit likelihood

18.9%Up 17.6 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used7.5

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record
CVE-2002-0569
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record
CVE-2002-0569
Updated
2026-11-02
EUVDEUVD-2002-0564No score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record
EUVD-2002-0564
Updated
2026-11-03
GitHub AdvisoriesGHSA-g3xm-75qj-2vf8No score

Oracle 9i Application Server allows remote attackers to bypass access restrictions for...

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).

Record
GHSA-g3xm-75qj-2vf8
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open