CVE-2002-1666

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdfPatch, Vendor Advisory
http://www.securityfocus.com/bid/4551Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/8897
http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdfPatch, Vendor Advisory
http://www.securityfocus.com/bid/4551Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/8897

Timeline

Published: Dec 31, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-16672.1The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page inv CVE-2002-16682.1HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly CVE-2002-16692.1pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify wo CVE-2002-16704.6Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explor CVE-2002-16715.0Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of th CVE-2002-16722.1Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to re CVE-2002-16733.6The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows l CVE-2002-16741.2procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function ref CVE-2002-16756.4Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of servi CVE-2002-16762.1BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._N CVE-2002-16775.014all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invali CVE-2002-16784.3Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal auth