CVE-2002-1639

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-04-01 · updated 2026-06-16

Description

Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".

Affected products

Oracle Corporation Configurator: from 11.5.6.0.0 through 11.5.6.16.53; from 11.5.7.0.0 through 11.5.7.17.31; 11i

References

http://securitytracker.com/id?1003967
http://www.kb.cert.org/vuls/id/158323
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html
http://www.securityfocus.com/bid/4433
https://exchange.xforce.ibmcloud.com/vulnerabilities/8782
http://securitytracker.com/id?1003967
http://www.kb.cert.org/vuls/id/158323
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html
http://www.securityfocus.com/bid/4433
https://exchange.xforce.ibmcloud.com/vulnerabilities/8782

Get alerted when CVE-2002-1639 or the next vulnerability affects your stack