CVE-2002-1630: High severity Oracle Application Server vulnerability
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1630?
CVE-2002-1630 is classified as a high-severity vulnerability due to its ability to allow remote attackers to send arbitrary emails.
How do I fix CVE-2002-1630?
To fix CVE-2002-1630, it is recommended to apply the latest security patches from Oracle for your version of the Application Server.
What software is affected by CVE-2002-1630?
CVE-2002-1630 affects Oracle 9i Application Server versions 9.0.2.0.0, 9.0.2.0.1, and earlier versions including 1.0.2.1s and 1.0.2.2.
Can CVE-2002-1630 lead to unauthorized email access?
Yes, CVE-2002-1630 can potentially allow attackers to send emails on behalf of the server, leading to unauthorized use.
Is CVE-2002-1630 still relevant today?
While CVE-2002-1630 was disclosed over two decades ago, vulnerabilities in outdated systems remain a concern if they are still in use.