CVE-2002-0562

no score yetEPSS 7.0%

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.

EPSS: 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2002-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:application_server
oracle:application_server_web_cache
oracle:oracle9i

References

http://marc.info/?l=bugtraq&m=101301440005580&w=2
http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf
http://www.cert.org/advisories/CA-2002-08.html
http://www.kb.cert.org/vuls/id/698467
http://www.securityfocus.com/bid/4034

Check your stack JSON