What’s Vulnerable › Vulnerabilities

CVE-2001-0126

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-03-12 · updated 2026-06-16

Description

Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.

Affected products

• Oracle8I: 8.1.7

References

• http://marc.info/?l=bugtraq&m=97906670012796&w=2
• http://marc.info/?l=bugtraq&m=98027700625521&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5905
• http://marc.info/?l=bugtraq&m=97906670012796&w=2
• http://marc.info/?l=bugtraq&m=98027700625521&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5905

Get alerted when CVE-2001-0126 or the next vulnerability affects your stack