CVE-2002-1666

Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.

Published: Dec 31, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-1666
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
oracle / e-business_suite	11.3	11.3.x
oracle / e-business_suite	11.1	11.1.x
oracle / e-business_suite	11.6	11.6.x
oracle / e-business_suite	11.2	11.2.x
oracle / e-business_suite	11.5	11.5.x
oracle / e-business_suite	11.4	11.4.x

http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf
http://www.securityfocus.com/bid/4551
https://exchange.xforce.ibmcloud.com/vulnerabilities/8897

Vulnerability Database

289,697

CVE-2002-1666