4.6med
CVE-2002-1637
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS,…
Published 24 y ago · modified 4 mo ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 48%
Public exploits
0
none known
Summary
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
Exploit prediction (EPSS)
0.57% probability of exploitation in the next 30 days, higher than 48% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/972 · vdb-entry, x_refsource_XF, x_transferred
- kb.cert.org /vuls/id/712723 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- nextgenss.com /papers/hpoas.pdf · x_refsource_MISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/968 · vdb-entry, x_refsource_XF, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/971 · vdb-entry, x_refsource_XF, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/969 · vdb-entry, x_refsource_XF, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/970 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2002-1637
- NVD: CVE-2002-1637
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.