CVE-2002-1631: SQL Injection
Published Dec 31, 2002
·Updated
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
Affected Software
5 affected components
Oracle Application Server=1.0.2
Oracle Application Server=1.0.2.1s
Oracle Application Server=1.0.2.2
Oracle Application Server=9.0.2.0.0
Oracle Application Server=9.0.2.0.1
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Mar 26, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1631?
CVE-2002-1631 is considered a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2002-1631?
To fix CVE-2002-1631, apply the latest patches provided by Oracle for the affected versions of Oracle Application Server.
3
What versions are affected by CVE-2002-1631?
CVE-2002-1631 impacts Oracle Application Server versions 9.0.2.0.0, 9.0.2.0.1, 1.0.2.1s, 1.0.2.2, and 1.0.2.
4
What type of attacks can exploit CVE-2002-1631?
CVE-2002-1631 can be exploited through SQL injection attacks, allowing attackers to execute arbitrary SQL commands.
5
Is CVE-2002-1631 a local or remote vulnerability?
CVE-2002-1631 is a remote vulnerability, enabling attackers to exploit it over the network.