1. CVE-Search
  2. CVE-2002-1637
ID CVE-2002-1637
Summary Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
cert-vn VU#712723
misc http://www.nextgenss.com/papers/hpoas.pdf
xf
  • default-oracle-applsys(972)
  • default-oracle-apps(971)
  • default-oracle-scott(970)
  • default-oracle-sys(969)
  • default-oracle-system(968)
Last major update 11-07-2017 - 01:29
Published 26-02-2002 - 05:00
Last modified 11-07-2017 - 01:29
Back to Top