CVE-2002-1636: XSS
Published Dec 31, 2002
·Updated
Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.
Affected Software
1 affected component
Oracle Application Server=1.0.2
Event History
Dec 31, 2002
CVE Published
05:00 AM
Mar 28, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1636?
CVE-2002-1636 has a medium severity rating due to its potential to allow remote attackers to execute arbitrary scripts.
2
How do I fix CVE-2002-1636?
To fix CVE-2002-1636, update the Oracle 9i Application Server to a version that addresses this cross-site scripting vulnerability.
3
What software is affected by CVE-2002-1636?
CVE-2002-1636 affects Oracle 9i Application Server version 1.0.2.
4
What type of vulnerability is CVE-2002-1636?
CVE-2002-1636 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2002-1636 lead to data exposure?
Yes, CVE-2002-1636 can lead to data exposure by allowing attackers to inject malicious scripts into web pages.